If you can see this check that
In order to drop ICMP packets which are arriving on eth0
faster than 1 per second,
you could make use of which of the following iptable commands? Here
the default policy for the imput chain is ACCEPT.
A. |
iptables -t filter -A INPUT -i eth0 -p icmp --icmp-type echo-request -m limit --limit 1/second -j ACCEPT
iptables -A INPUT -i eth0 -p icmp --icmp-type echo-request -j DROP
|
B. |
iptables -A INPUT -i eth0 -p icmp --icmp-type echo-request -m limit --limit 1/second -j DROP
|
C. |
iptables -t filter -A INPUT -i eth0 -p icmp --icmp-type echo-request -m limit --limit 1/second -j DROP
|
D. |
iptables -t filter -A INPUT -i eth0 -p icmp --icmp-type echo-request -m limit --limit 1/second -j DROP
iptables -t filter -A INPUT -i eth0 -p icmp --icmp-type echo-request -j ACCEPT
|
E. |
iptables -t filter -A INPUT -o eth0 -p icmp --icmp-type echo-request --limit 1/second -j ACCEPT
iptables -A INPUT -i eth0 -p icmp --icmp-type echo-request -j DELETE
|
0-sa-14
Looks good.
Close
2-sa-14
This would DROP packets which arrives at rates of LESS than 1 per second, and would ignore packets which arrived faster. This is the opposite of that asked by the question.
Close
1-sa-14
This would DROP packets which arrives at rates of LESS than 1 per second, and would ignore packets which arrived faster. This is the opposite of that asked by the question.
Close
3-sa-14
This would DROP packets which arrives at rates of LESS than 1 per second, and would ignore packets which arrived faster. This is the opposite of that asked by the question.
Close
4-sa-14
There is no such target as DELETE.
Close