diff --git a/src/freedombone-utils-firewall b/src/freedombone-utils-firewall index dc94339986b2ab2dcdbd0a81635d0ac58ddc1e67..3b44daf5fb3e02fe230d4d56ca2b49d321896d9d 100755 --- a/src/freedombone-utils-firewall +++ b/src/freedombone-utils-firewall @@ -146,6 +146,20 @@ function configure_firewall { iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP iptables -A INPUT -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP iptables -A INPUT -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,RST SYN,RST -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,RST FIN,RST -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,ACK FIN -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,URG URG -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,FIN FIN -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,PSH PSH -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL ALL -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL NONE -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP + iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP # Incoming malformed NULL packets: iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP