mirror of
git://git.code.sf.net/p/xtables-addons/xtables-addons
synced 2025-09-07 05:05:12 +02:00

It is no longer possible to specify gc_expir_time with a time lower than its default value (65000 msecs). This is to avoid running peer_gc() earlier than 1 minute [well, 65 s actually] in the future, which would otherwise render anti-spoof protection in SPA mode non-functional.
PSD (Portscan Detection) External extensions for Xtables-addons Example: iptables -A INPUT -m psd --psd-weight-threshold 21 --psd-delay-threshold 300 --psd-lo-ports-weight 1 --psd-hi-ports-weight 10 -j LOG --log-prefix "PSD: "