| Main Archive Page > Month Archives > full-disclosure-uk archives |
mustache power
On Fri, Nov 21, 2008 at 12:48 AM, <Valdis.Kletnieks@vt.edu> wrote:
> On Thu, 20 Nov 2008 23:28:31 CST, Fredrick Diggle said:
>
>> everyone's best interest. Also Diggle Sec is working on iptables
>> patches to allow those who do not want to be attacked to drop all
>> traffic with the evil bit set.
>
> Already doable:
>
> iptables -A INPUT -m u32 --u32 "3&0x80=0x80" -m limit --limit 4/s -j LOG --log-prefix "iptables rfc3514 packet "
>
>
>