I'd like to start off saying I am a beginner with iptables. I seem to be having issues with my iptables.
I'd like to block incoming packets greater than 150 bytes. I have a copy of an exploit that attackers are using on my game servers. I see that the packet size in total is greater than 150.
My rule is as follows
-A INPUT -p udp -s 0/0 -d 0/0 --dport 27015:27016 -m length --length 151:65535 -j DROP
I made sure this was the first rule regarding the game server. However, when I go and run the exploit and view the incoming packets using wireshark, all of them are coming through or so it appears
Did I incorrectly enter this rule or is there more to it?
Thanks for your help!
