# No ECN
echo 0 > /proc/sys/net/ipv4/tcp_ecn
# No-IP-Forward
echo 0 > /proc/sys/net/ipv4/ip_forward
# NO_NETBIOS NO_SAMBA
iptables -t nat -A PREROUTING -p TCP -i eth1 --dport 135:139 -j DROP
iptables -t nat -A PREROUTING -p UDP -i eth1 --dport 137:139 -j DROP
iptables -t nat -A PREROUTING -p TCP -i eth1 --dport 445 -j DROP
iptables -t nat -A PREROUTING -p UDP -i eth1 --dport 445 -j DROP

Rispondi quotando