Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up

Simple script against most network threats.

License

NotificationsYou must be signed in to change notification settings

yuk1c/antiddos

Repository files navigation

Quick Installation

sudo apt update && sudo apt purge ufw firewalld -y && sudo apt install nftables git -y && git clone https://github.com/yuk1c/antiddos && cd antiddos && sudo ./antiddos-yuki && cd ..

This command removes UFW/firewalld completely as the script isn't compatible with them. Make sure you don't rely on them before running it.

Dependencies

The mandatory dependencies arenftables (for the rules) andgit (so you can download the script, update it, etc.). Nothing else.For the monitoring script, you'd need to have Python 3 installed.

Compatibility

  • Ubuntu 22.04+
  • Debian 11+ [Beta]

Probably compatible with other Debian-based distros.Use the newest LTS Ubuntu release for the script to perform at its best.Also, you can use the script on your Linux laptop, for example, so you'll care less about being targeted with L3-L4 attacks in public networks.

Quick Update

cd ~/antiddos && git pull && sudo ./antiddos-yuki && cd

Real-time monitoring

sudo python3 monitoring.py

Opening ports

Add a rule to the beginning of the user-rules.nft file. Here's an example of one to allow TCP to port 25565 (for Minecraft servers):

add rule ip yuki-script prerouting tcp dport 25565 counter accept

There are some pre-defined rules already; just uncomment ones you need and re-apply the script.


[8]ページ先頭

©2009-2025 Movatter.jp