Browse Source

readme.eng.md : minor fix

pull/176/head
bol-van 1 year ago
parent
commit
2ab1141b88
  1. 2
      docs/readme.eng.md

2
docs/readme.eng.md

@ -99,7 +99,7 @@ Its necessary to use this filter when also using `connbytes 1:6`. Without it pac
Some attacks require redirection of incoming packets :
iptables -t mangle -I PREROUTING -i <external_interface> -p tcp --sport 80 -m connbytes --connbytes-dir=reply --connbytes-mode=packets --connbytes 1:6 -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass
`iptables -t mangle -I PREROUTING -i <external_interface> -p tcp --sport 80 -m connbytes --connbytes-dir=reply --connbytes-mode=packets --connbytes 1:6 -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass`
Incoming packets are filtered by incoming interface, source port and IP. This is opposite to the direct rule.

Loading…
Cancel
Save