diff options
Diffstat (limited to 'extensions/libxt_length.txlate')
| -rw-r--r-- | extensions/libxt_length.txlate | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/extensions/libxt_length.txlate b/extensions/libxt_length.txlate new file mode 100644 index 00000000..e777c265 --- /dev/null +++ b/extensions/libxt_length.txlate @@ -0,0 +1,11 @@ +iptables-translate -A INPUT -p icmp -m length --length 86:0xffff -j DROP +nft add rule ip filter INPUT ip protocol icmp meta length 86-65535 counter drop + +iptables-translate -A INPUT -p udp -m length --length :400 +nft add rule ip filter INPUT ip protocol udp meta length 0-400 counter + +iptables-translate -A INPUT -p udp -m length --length 40 +nft add rule ip filter INPUT ip protocol udp meta length 40 counter + +iptables-translate -A INPUT -p udp -m length ! --length 40 +nft add rule ip filter INPUT ip protocol udp meta length != 40 counter |