Jan Rafaj 2b2b6246f0 pknock: Make non-zero time mandatory for TCP mode ...

This avoids DDoS on the first-in-sequence TCP knockport, which would
otherwise fill up the peer table permanently - especially if the user
does not specify --autoclose - and would thus cause permanent pknock
DoS.

Signed-off-by: Jan Rafaj <jr+netfilter-devel@cedric.unob.cz>

2009-10-12 01:24:41 +02:00

9.8 KiB

Raw Blame History

View Raw