Update update.sh

Enkidu-6 · Jan 3, 2023 · 5a78b00 · 5a78b00
1 parent 853d860
commit 5a78b00
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/update.sh b/update.sh
@@ -28,7 +28,7 @@ for i in "${!array[@]}"; do
    printf "iptables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -m recent --name ddos-%s-%s --set\n" "${array[i]}" "${array2[i]}" "${array[i]}" "${array2[i]}"
    printf "iptables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -m connlimit --connlimit-mask 32 --connlimit-above 2 -j SET --add-set tor-%s-%s src\n" "${array[i]}" "${array2[i]}" "${array[i]}" "${array2[i]}"
    printf "iptables -t mangle -A PREROUTING -p tcp --destination %s -m set --match-set tor-%s-%s src -j DROP\n" "${array[i]}" "${array[i]}" "${array2[i]}"
-   printf "iptables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m conntrack --ctstate NEW -m hashlimit --hashlimit-name TOR-%s --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-above 30/hour --hashlimit-burst 2 --hashlimit-htable-expire 120000 -j DROP\n" "${array[i]}" "${array2[i]}" "${array[i]}" 
+   printf "iptables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m hashlimit --hashlimit-name TOR-%s --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-above 30/hour --hashlimit-burst 4 --hashlimit-htable-expire 120000 -j DROP\n" "${array[i]}" "${array2[i]}" "${array[i]}" 
    printf "iptables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m connlimit --connlimit-mask 32 --connlimit-above 2 -j DROP\n" "${array[i]}" "${array2[i]}"
    printf "iptables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -j ACCEPT\n" "${array[i]}" "${array2[i]}"
 done
@@ -43,7 +43,7 @@ for i in "${!ARRAY[@]}"; do
    printf "ip6tables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -m recent --name ddos6-%s-%s --set\n" "${ARRAY[i]}" "${ARRAY2[i]}" "${ARRAY3[i]}" "${ARRAY2[i]}"
    printf "ip6tables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -m connlimit --connlimit-mask 128 --connlimit-above 2 -j SET --add-set tor-%s-%s src\n" "${ARRAY[i]}" "${ARRAY2[i]}" "${ARRAY3[i]}" "${ARRAY2[i]}"
    printf "ip6tables -t mangle -A PREROUTING -p tcp --destination %s -m set --match-set tor-%s-%s src -j DROP\n" "${ARRAY[i]}" "${ARRAY3[i]}" "${ARRAY2[i]}"
-   printf "ip6tables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m conntrack --ctstate NEW -m hashlimit --hashlimit-name TOR6-%s --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-above 30/hour --hashlimit-burst 2 --hashlimit-htable-expire 120000 -j DROP\n" "${ARRAY[i]}" "${ARRAY2[i]}" "${ARRAY3[i]}"
+   printf "ip6tables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m hashlimit --hashlimit-name TOR6-%s --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-above 30/hour --hashlimit-burst 4 --hashlimit-htable-expire 120000 -j DROP\n" "${ARRAY[i]}" "${ARRAY2[i]}" "${ARRAY3[i]}"
    printf "ip6tables -t mangle -A PREROUTING -p tcp --syn --destination %s --destination-port %s -m connlimit --connlimit-mask 128 --connlimit-above 2 -j DROP\n" "${ARRAY[i]}" "${ARRAY2[i]}"
    printf "ip6tables -t mangle -A PREROUTING -p tcp --destination %s --destination-port %s -j ACCEPT\n" "${ARRAY[i]}" "${ARRAY2[i]}"
 done