IPTables failt :/

  • Hey Leute,


    ich war gerade dabei, meine niegelnagelneue IPTables-Konfiguration zu testen, und jetzt sehe ich, dass sie failt :thumbdown:
    Erst einmal habe ich mein IPTables so eingerichtet, dass maximal 50 Verbindungen pro IP möglich sind:

    Code
    iptables -A INPUT -p tcp --syn -m connlimit --connlimit-above 50 -j REJECT --reject-with tcp-reset

    Anschließend komme ich mit einem selbstgeschriebenem DoS-Tool, was 100 TCP-Verbindungen aufbaut und etwa 5 Sekunden offen hält ( ich will meinen Server ja nicht kaputt machen :D ) - alle kommen durch und bleiben bis zum Ende :/
    Hat jemand eine Ahnung, warum ? :thumbdown:
    Die Verbindungen werden in etwa 1200ms gestartet und laufen gleichzeitig ;)


    Tion

  • ... keine Ahnung :D
    Kann man das aus der VM irgendwie heraus sehen ?


    e: Ich bin schon so weit, dass von 800 etwa 200 "failen" - Zufall ?

    Code
    Bereite System vor...DoS StartDoS 461 failed: Connection timed out: connectDoS 251 failed: Connection timed out: connectDoS 253 failed: Connection timed out: connectDoS 459 failed: Connection timed out: connectDoS 257 failed: Connection timed out: connectDoS 255 failed: Connection timed out: connectDoS 283 failed: Connection timed out: connectDoS 451 failed: Connection timed out: connectDoS 287 failed: Connection timed out: connectDoS 285 failed: Connection timed out: connectDoS 449 failed: Connection timed out: connectDoS 447 failed: Connection timed out: connectDoS 289 failed: Connection timed out: connectDoS 445 failed: Connection timed out: connectDoS 339 failed: Connection timed out: connectDoS 345 failed: Connection timed out: connectDoS 341 failed: Connection timed out: connectDoS 343 failed: Connection timed out: connectDoS 418 failed: Connection timed out: connectDoS 299 failed: Connection timed out: connectDoS 347 failed: Connection timed out: connectDoS 238 failed: Connection timed out: connectDoS 351 failed: Connection timed out: connectDoS 414 failed: Connection timed out: connectDoS 349 failed: Connection timed out: connectDoS 416 failed: Connection timed out: connectDoS 303 failed: Connection timed out: connectDoS 240 failed: Connection timed out: connectDoS 353 failed: Connection timed out: connectDoS 5 failed: Connection timed out: connectDoS 310 failed: Connection timed out: connectDoS 275 failed: Connection timed out: connectDoS 262 failed: Connection timed out: connectDoS 269 failed: Connection timed out: connectDoS 277 failed: Connection timed out: connectDoS 390 failed: Connection timed out: connectDoS 279 failed: Connection timed out: connectDoS 264 failed: Connection timed out: connectDoS 391 failed: Connection timed out: connectDoS 355 failed: Connection timed out: connectDoS 389 failed: Connection timed out: connectDoS 305 failed: Connection timed out: connectDoS 359 failed: Connection timed out: connectDoS 386 failed: Connection timed out: connectDoS 385 failed: Connection timed out: connectDoS 270 failed: Connection timed out: connectDoS 387 failed: Connection timed out: connectDoS 361 failed: Connection timed out: connectDoS 330 failed: Connection timed out: connectDoS 371 failed: Connection timed out: connectDoS 280 failed: Connection timed out: connectDoS 381 failed: Connection timed out: connectDoS 367 failed: Connection timed out: connectDoS 320 failed: Connection timed out: connectDoS 301 failed: Connection timed out: connectDoS 282 failed: Connection timed out: connectDoS 284 failed: Connection timed out: connectDoS 318 failed: Connection timed out: connectDoS 244 failed: Connection timed out: connectDoS 256 failed: Connection timed out: connectDoS 402 failed: Connection timed out: connectDoS 398 failed: Connection timed out: connectDoS 400 failed: Connection timed out: connectDoS 357 failed: Connection timed out: connectDoS 363 failed: Connection timed out: connectDoS 295 failed: Connection timed out: connectDoS 319 failed: Connection timed out: connectDoS 323 failed: Connection timed out: connectDoS 321 failed: Connection timed out: connectDoS 325 failed: Connection timed out: connectDoS 327 failed: Connection timed out: connectDoS 396 failed: Connection timed out: connectDoS 331 failed: Connection timed out: connectDoS 329 failed: Connection timed out: connectDoS 297 failed: Connection timed out: connectDoS 335 failed: Connection timed out: connectDoS 333 failed: Connection timed out: connectDoS 337 failed: Connection timed out: connectDoS 403 failed: Connection timed out: connectDoS 243 failed: Connection timed out: connectDoS 401 failed: Connection timed out: connectDoS 399 failed: Connection timed out: connectDoS 245 failed: Connection timed out: connectDoS 463 failed: Connection timed out: connectDoS 247 failed: Connection timed out: connectDoS 443 failed: Connection timed out: connectDoS 441 failed: Connection timed out: connectDoS 439 failed: Connection timed out: connectDoS 433 failed: Connection timed out: connectDoS 242 failed: Connection timed out: connectDoS 324 failed: Connection timed out: connectDoS 276 failed: Connection timed out: connectDoS 274 failed: Connection timed out: connectDoS 326 failed: Connection timed out: connectDoS 328 failed: Connection timed out: connectDoS 272 failed: Connection timed out: connectDoS 268 failed: Connection timed out: connectDoS 422 failed: Connection timed out: connectDoS 424 failed: Connection timed out: connectDoS 234 failed: Connection timed out: connectDoS 232 failed: Connection timed out: connectDoS 230 failed: Connection timed out: connectDoS 288 failed: Connection timed out: connectDoS 298 failed: Connection timed out: connectDoS 312 failed: Connection timed out: connectDoS 322 failed: Connection timed out: connectDoS 278 failed: Connection timed out: connectDoS 286 failed: Connection timed out: connectDoS 296 failed: Connection timed out: connectDoS 316 failed: Connection timed out: connectDoS 392 failed: Connection timed out: connectDoS 394 failed: Connection timed out: connectDoS 258 failed: Connection timed out: connectDoS 293 failed: Connection timed out: connectDoS 427 failed: Connection timed out: connectDoS 429 failed: Connection timed out: connectDoS 431 failed: Connection timed out: connectDoS 291 failed: Connection timed out: connectDoS 365 failed: Connection timed out: connectDoS 266 failed: Connection timed out: connectDoS 388 failed: Connection timed out: connectDoS 281 failed: Connection timed out: connectDoS 453 failed: Connection timed out: connectDoS 383 failed: Connection timed out: connectDoS 369 failed: Connection timed out: connectDoS 397 failed: Connection timed out: connectDoS 393 failed: Connection timed out: connectDoS 304 failed: Connection timed out: connectDoS 373 failed: Connection timed out: connectDoS 307 failed: Connection timed out: connectDoS 334 failed: Connection timed out: connectDoS 311 failed: Connection timed out: connectDoS 395 failed: Connection timed out: connectDoS 336 failed: Connection timed out: connectDoS 317 failed: Connection timed out: connectDoS 313 failed: Connection timed out: connectDoS 315 failed: Connection timed out: connectDoS 377 failed: Connection timed out: connectDoS 375 failed: Connection timed out: connectDoS 309 failed: Connection timed out: connectDoS 380 failed: Connection timed out: connectDoS 308 failed: Connection timed out: connectDoS 382 failed: Connection timed out: connectDoS 384 failed: Connection timed out: connectDoS 300 failed: Connection timed out: connectDoS 366 failed: Connection timed out: connectDoS 294 failed: Connection timed out: connectDoS 290 failed: Connection timed out: connectDoS 302 failed: Connection timed out: connectDoS 348 failed: Connection timed out: connectDoS 350 failed: Connection timed out: connectDoS 292 failed: Connection timed out: connectDoS 346 failed: Connection timed out: connectDoS 338 failed: Connection timed out: connectDoS 340 failed: Connection timed out: connectDoS 344 failed: Connection timed out: connectDoS 342 failed: Connection timed out: connectDone in 21732 msSucess: 641 | Failed: 159

    Oder merkt IPTables das erst nach einer bestimmten Zeit ?