News for hackers. Stuff that matters.
Re:IP traffic over ICMP tunneling by ryan-c on Wednesday November 11, 2015 @11:57AM (#10547603)
If you're going to do that, set the maximum length to 128 bytes. Different ping tools use different sized payloads - I know of some common ones that generate packets by default that would be blocked with that limit.

Also, instead of using the plain limit match, check out hashlimit. It can apply a rate limit on a per sender, destination, or sender+destination basis. The recent match may also be of interest.

There are no comments on this comment yet.