Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://friendica.eskimo.com/objects/a0ad54dd-3769-7336-d144-c5c421558722">nanook (nanook@friendica.eskimo.com)'s status on Friday, 23-Jan-2026 17:59:25 JST</a><a href="https://friendica.eskimo.com/profile/nanook" title="nanook@friendica.eskimo.com"><img src="https://gnusocial.jp/theme/gnusocialjp/default-avatar-stream.png" width="48" height="48" alt="nanook" style="position: absolute; left: 0; top: 0;">nanook</a><div><a href="https://fsebugoutzone.org/objects/00f96301-0892-40be-8fde-b726a2cd2603" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/259587" title="fluffy@fsebugoutzone.org">touch fluffy tail (Heroic) :verified:</a></li><li><a href="https://gnusocial.jp/user/327325" title="bajax@baj.ax">bajax</a></li></ul></div></section><article><a href="https://fsebugoutzone.org/users/p">@p</a> <a href="https://baj.ax/users/bajax">@bajax</a> <a href="https://fsebugoutzone.org/users/fluffy">@fluffy</a> Consider some UFW rules like these: -A PREROUTING -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j DROP
-A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name http_limit --hashlimit-above 60/sec --hashlimit-burst 120 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW http SYN Flood Detected] "
-A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name http_limit --hashlimit-above 60/sec --hashlimit-burst 120 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP
-A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -j ACCEPT
-A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name https_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] "
-A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name https_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP
-A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -j ACCEPT
-A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacy_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] "
-A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacy_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP
-A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -j ACCEPT
-A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacys_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] "
-A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacys_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP
-A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -j ACCEPT</article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/6078910#notice-11982256">In conversation</a><time datetime="2026-01-23T17:59:25+09:00" title="Friday, 23-Jan-2026 17:59:25 JST">about 8 days ago</time> <span>from <span><a href="https://friendica.eskimo.com/display/a0ad54dd-3769-7336-d144-c5c421558722" rel="external" title="Sent from friendica.eskimo.com via ActivityPub">friendica.eskimo.com</a></span></span><a href="https://friendica.eskimo.com/display/a0ad54dd-3769-7336-d144-c5c421558722">permalink</a></footer></blockquote>

Corresponding Notice

Embed this notice
nanook (nanook@friendica.eskimo.com)'s status on Friday, 23-Jan-2026 17:59:25 JSTnanook
in reply to
@p @bajax @fluffy Consider some UFW rules like these: -A PREROUTING -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j DROP -A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name http_limit --hashlimit-above 60/sec --hashlimit-burst 120 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW http SYN Flood Detected] " -A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name http_limit --hashlimit-above 60/sec --hashlimit-burst 120 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP -A ufw-before-input -p tcp --syn --dport 80 -m conntrack --ctstate NEW -j ACCEPT -A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name https_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] " -A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name https_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP -A ufw-before-input -p tcp --syn --dport 443 -m conntrack --ctstate NEW -j ACCEPT -A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacy_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] " -A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacy_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP -A ufw-before-input -p tcp --syn --dport 8090 -m conntrack --ctstate NEW -j ACCEPT -A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacys_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j LOG --log-prefix "[UFW https SYN Flood Detected] " -A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -m hashlimit --hashlimit-name yacys_limit --hashlimit-above 150/sec --hashlimit-burst 300 --hashlimit-mode srcip --hashlimit-srcmask 32 -j DROP -A ufw-before-input -p tcp --syn --dport 8443 -m conntrack --ctstate NEW -j ACCEPT
In conversationabout 8 days ago from friendica.eskimo.compermalink

Public

Embed Notice

HTML Code

Corresponding Notice