Security

Ask something
Discussion Locked

IPTables

0 helpful
0 replies

by ppuru

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to optimize my IPTable filtering rules.

Please suggest whether the rule

iptables -t nat -A PREROUTING -i eth0 -s 172.16.0.0/12 -j DROP

will deal with spoofed packets better than

iptables -t filter -A INPUT -i eth0 -s 172.16.0.0/12-j DROP

Also, are these rules necessary when I have already enabled rp_filter at kernel level?

TIA

Prakash

0 replies

No replies were posted before this discussion closed.

This discussion is closed to new replies.