Skip to content

Instantly share code, notes, and snippets.

@Zobber

Zobber/Suricata bloqueo temp de conn

Created April 24, 2020 01:39
Show Gist options
  • Save Zobber/857538db8c9716c51e14b45e1533a69d to your computer and use it in GitHub Desktop.
Save Zobber/857538db8c9716c51e14b45e1533a69d to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Suricata bloqueo temp de conn
#Suricata_IDS Bloqueo temporal de conexiones.
alert tcp any any -> any any (msg:"Pruebas_Suricata";content:"Enviando segmento TCP";sid:9900001;rev:1;)
threshold.config:
rate_filter gen_id 1, sig_id 9900001, track by_dst, count 200, seconds 60, new_action drop, timeout 250
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment