Tagged Questions
4
votes
4answers
922 views
what is a good public available iptables script for ddos mitigation?
what is a good public available iptables script for ddos mitigation?
9
votes
2answers
1k views
Reject IP packets with an ICMP error, or just drop them?
Consider an internet-facing host (the outer firewall). What should be done with undesired traffic: just drop it, or send back an ICMP error such as port unreachable? (In Linux terms: iptables -P DROP ...
