diff options
Diffstat (limited to 'extensions/libxt_SYNPROXY.txlate')
| -rw-r--r-- | extensions/libxt_SYNPROXY.txlate | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/extensions/libxt_SYNPROXY.txlate b/extensions/libxt_SYNPROXY.txlate new file mode 100644 index 00000000..b3de2b2a --- /dev/null +++ b/extensions/libxt_SYNPROXY.txlate @@ -0,0 +1,2 @@ +iptables-translate -t mangle -A INPUT -i iifname -p tcp -m tcp --dport 80 -m state --state INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460 +nft add rule ip mangle INPUT iifname "iifname" tcp dport 80 ct state invalid,untracked counter synproxy sack-perm timestamp wscale 7 mss 1460 |