Pretizene AP

[Petr Lascak]

lkv pise:
> Zdravim,
> resim nasledujici problem na jednom nasem AP je klient od ktereho jde , 
> kdyz si zapne pocitac, neuveritelne mnozstvi pozadavku na spojeni. Kdyz 
> pustim iptraf tak mi to za minutku klidne napocita 2000 spojeni. Problem je 
> v tom ze takto se vsem ostatnim zvysi ping az na 2000ms a internet temer 
> nejde. Nevite jakym zpusobem omezit tohoto uzivatele ? Pomuze nejake chytre 
> pravidlo ve firewallu ?

 Nevim co presne mas za problem,, my to resime takto (M$ (c))
 
 iptables -I FORWARD -p tcp -m multiport --dports 113,135,136,137,138,139,445 -j
 REJECT --reject-with tcp-reset
 iptables -I FORWARD -p udp -m multiport --dports 113,135,136,137,138,139,445 -j
 REJECT --reject-with icmp-port-unreachable
 iptables -I FORWARD -p tcp -m multiport --sports 113,135,136,137,138,139,445 -j
 REJECT --reject-with tcp-reset
 iptables -I FORWARD -p udp -m multiport --sports 113,135,136,137,138,139,445 -j
 REJECT --reject-with icmp-port-unreachable
 
 iptables -I INPUT -p tcp -m multiport --dports 113,135,136,137,138,139,445 -j RE
 JECT --reject-with tcp-reset
 iptables -I INPUT -p udp -m multiport --dports 113,135,136,137,138,139,445 -j RE
 JECT --reject-with icmp-port-unreachable
 iptables -I INPUT -p tcp -m multiport --sports 113,135,136,137,138,139,445 -j RE
 JECT --reject-with tcp-reset
 iptables -I INPUT -p udp -m multiport --sports 113,135,136,137,138,139,445 -j RE
 JECT --reject-with icmp-port-unreachable
 

-- 
	Petr Lascak
        ITF FreeNet Liberec		
 	http://www.lbcfree.net/