Foro de elhacker.net

/lib/xtables/libipt_syn-flood.so

yaourt -S xtables-git

Installation instructions for Xtables-addons
============================================

Xtables-addons uses the well-known configure(autotools) infrastructure
in combination with the kernel's Kbuild system.

   $ ./configure
   $ make
   # make install


Supported configurations for this release
=========================================

   * iptables >= 1.4.5

   * kernel-devel >= 2.6.32
     with prepared build/output directory
     - CONFIG_NF_CONNTRACK or CONFIG_IP_NF_CONNTRACK
     - CONFIG_NF_CONNTRACK_MARK or CONFIG_IP_NF_CONNTRACK_MARK
       enabled =y or as module (=m)
     - CONFIG_CONNECTOR y/m if you wish to receive userspace
       notifications from pknock through netlink/connector


Selecting extensions
====================

You can edit the "mconfig" file to select what modules to build and
install. By default, all modules are enabled.


Configuring and compiling
=========================

./configure [options]

--without-kbuild

   Deactivate building kernel modules, and just do userspace parts.

--with-kbuild=

   Specifies the path to the kernel build output directory. We need
   it for building the kernel extensions. It defaults to
   /lib/modules/$(running version)/build, which usually points to
   the right directory. (If not, you need to install something.)

   For RPM building, it should be /usr/src/linux-obj/...
   or whatever location the distro makes use of.

--with-xtlibdir=

   Specifies the path to where the newly built extensions should
   be installed when `make install` is run. The default is to
   use the same path that Xtables/iptables modules use, as
   determined by `pkg-config xtables --variable xtlibdir`.
   Thus, this option normally does NOT need to be specified
   anymore, even if your distribution put modules in a strange
   location.

If you want to enable debugging, use

   ./configure CFLAGS="-ggdb3 -O0"

(-O0 is used to turn off instruction reordering, which makes debugging
much easier.)

To make use of a libxtables that is not in the default path, either

  a) append the location of the pkg-config files like:

   PKG_CONFIG_PATH=/usr/local/lib/pkgconfig

     (Assuming that files have been installed)
or,

  b) override the pkg-config variables, for example:

   ./configure libxtables_CFLAGS="-I../iptables/include" \
      libxtables_LIBS="-L../iptables/.libs \
         -Wl,-rpath,../iptables/.libs -lxtables"

     (Use this in case you wish to use it without having to
     run `make install`. This is because the libxtables.pc pkgconfig
     file in ../iptables would already point to e.g. /usr/local.)

Dato000 u otros o tú mismo dato000 me podrias pasar la libreria ( libipt_syn-flood.so ).Porfavor la necesito para hacer unas pruebas ya que ya no la dispongo de ella y hasta ahí estoy estancada.O tú portaro podrias pasarmela.Gracias por leer. :-*

Si me equivoco me lo decís pero creo que este tema se podria abordar por :
http://oss.sgi.com/LDP/HOWTO/Querying-libiptc-HOWTO/install.html

Pd : Saludos cuando pueda seguiré investigando sobre el tema.Habierta a más sugerencias. :-*

Hola

Cuando utilizaba gentoo, compilaba el núcleo a mano y las librerias xtables se encuentran hay, podrías echarle un vistazo, te lo digo porque yo tuve un problema similar al tuyo y es que tenia que agregar módulos de xtables.

P.D.: Esa libreria núnca la he visto, por el nombre será algo para ataques DDOS.

Un saludo

eso no es como para volver a netfilter???? el iptables es la evolución, no seria hacer un downgrade???

iptables -A INPUT -p tcp --dport 80 -j syn-flood

iptables -N syn-flood.

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i wlan+ -p tcp --tcp-flags SYN,ACK,FIN,RST RST -j syn-flood && echo " regla-053 ok"
iptables -A FORWARD -i wlan+ -p tcp --tcp-flags SYN,ACK,FIN,RST RST -j syn-flood && echo " regla-054 ok"
iptables -A syn-flood -m limit --limit 4/s --limit-burst 16 -j RETURN && echo " regla-055 ok"
iptables -A syn-flood -m limit --limit 75/s --limit-burst 100 -j RETURN && echo " regla-056 ok"
iptables -A syn-flood -j LOG --log-prefix "SYN FLOOD " --log-tcp-sequence --log-tcp-options -m limit --limit 1/second && echo " regla-057 ok"
iptables -A syn-flood -j DROP && echo " regla-058 ok"

Exacto, modifica el script agregando
Código:

iptables -N syn-flood.


lo mas al principio posible. Es decir, una ves definidas las variables que tengas etc
copia esa sentencia y listo el pollo.

Contame si te funca