DF
how many rules in total in iptables?
Size: a a a
2018 February 02
DF
approx
MG
Right now I'm not in trouble. They happen later.
MG
I'm thinking of removing the conntrack and putting it to another location.
MG
Deny, Do you have any rules to completely disable conntrack?
DF
iptables -t raw -I PREROUTING -p udp —dport 137 -j CT —notrack
DF
for example like this
but sure dont forget at start
iptables -r taw -F
but sure dont forget at start
iptables -r taw -F
MG
137/udp?
DF
i was doing that against flooding bot
DF
so i bypassed conntrack for specific flood i had
MG
ah ok
DF
also i suggest to disable MASQUERADE and put SNAT
DF
MASQUERADE is very cpu intensive
DF
if you have many interfaces (and you have, in pppoe)
MG
ummmm OK
MG
I´m using:
MG
/sbin/ethtool -A eth2 tx off rx off autoneg off
/sbin/ethtool -A eth3 tx off rx off autoneg off
/sbin/ethtool -A eth3 tx off rx off autoneg off
MG
no problem?