Differences

This shows you the differences between two versions of the page.

--- linux:netzwerk:firewall [2023/04/20 15:43] – ms
+++ linux:netzwerk:firewall [2023/11/05 21:54] (current) – ms
@@ Line 43: / Line 43: @@
 nft list rules
 nft list tables
+nft monitor [new | destroy] [tables | chains | sets | rules | elements] [xml | json]
 systemctl status nftables.service
@@ Line 57: / Line 58: @@
 table inet filter {
 ...
+</code>
+===== Brute Force auf ssh erschweren =====
+<code>
+add rule ip filter INPUT tcp dport 22 ct state new counter jump SSHBFORCE
+add chain ip filter SSHBFORCE
+add set ip filter denylist { type ipv4_addr; flags dynamic, timeout; timeout 5m }
+add rule ip filter SSHBFORCE ip protocol tcp ct state new, untracked limit rate over 3/minute add @denylist { ip saddr }
+add rule ip filter SSHBFORCE ip saddr @denylist drop
 </code>