Extensões Iptable

Owner

-m owner

--uid-owner, --gid owner

iptables -A OUTPUT -p tcp --dport 80 -d www.orkut.com -m owner --uid-owner

edson -j DROP

iptables -A OUTPUT -m owner --gid-owner 1002 -p icmp -j REJECT

MAC

-m mac

--mac-source

iptables -A INPUT -p tcp --dport 22 -m mac --mac-source 00:F3:90:03:01:BA -j

DROP
String
-m string

--string

--hex-string

-- algo bm ou --algo kpm

--from, --to offset

iptables -I FORWARD -m string --algo bm --string "orkut" -j DROP

IPRange
-m iprange

--src-range

--dst-range

iptables -A FORWARD -m iprange --src-range 192.168.20.10-192.168.20.20 -m

string --algo bm --string "facebook" -j DROP
Quota
-m quota

--quota

iptables -A OUTPUT -p tcp -d 192.168.20.53 --sport 21 -m quota --quota

20971520 -j ACCEPT

iptables -A OUTPUT -p tcp -d 192.168.20.53 --sport 21 -j DROP

connlimit
-m connlimit

--connlimit-above

iptables -A INPUT -tcp --dport 80 --syn -m connlimit --connlimit-above 30 -j

DROP
Time

- m time

- --timestart, --timestop

- --weekdays, --monthdays, --datestart

iptables -A FORWARD -m ipp2p --ipp2p -m time --timestart 12:00 --timestop

14:00 --weekdays Mon,Tue,Wed,Thu,Fri -j ACCEPT

(ipp2p - emule, Kazaa, etc.)

Limit
-m limit

--limit n/t

--limit-burst

iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 2/m --limit-

burst 2 -j ACCEPT

iptables -A INPUT -p icmp --icmp-type echo-request -j DROP

Recent
-m recent

--name xyz

--rcheck, --update, --rsource

--seconds, --hitcount

iptables -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j SSHSCAN

iptables -A SSHSCAN -m recent --set --name SSH --rsource

iptables -A SSHSCAN -m recent --update --seconds 60 --hitcount 5 --name SSH --rsource -j DROP
iptables -A SSHSCAN -j ACCEPT