mustache power On Fri, Nov 21, 2008 at 12:48 AM, <[EMAIL PROTECTED]> wrote: > On Thu, 20 Nov 2008 23:28:31 CST, Fredrick Diggle said: > >> everyone's best interest. Also Diggle Sec is working on iptables >> patches to allow those who do not want to be attacked to drop all >> traffic with the evil bit set. > > Already doable: > > iptables -A INPUT -m u32 --u32 "3&0x80=0x80" -m limit --limit 4/s -j LOG > --log-prefix "iptables rfc3514 packet " > > >
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
