jgmdev / ddos-deflate

Fork of DDoS Deflate with fixes, improvements and new features.
Other
760 stars 262 forks source link

ipv6 and ipv4 #85

Closed oim37 closed 1 year ago

oim37 commented 2 years ago

Use DDoS-Deflate version 1.3 OS Centos 7 x64 iptables

Banned the following ip addresses on Sat Mar 26 03:44:09 UTC 2022 ::ffff:111.222.111.222 with 386 connections

In iptables nothing, because have wrong ::ffff:

how to fix this, server use both ipv6 and ipv4.

persuader commented 1 year ago

I have the same issue with Ubuntu 22.04.

I think the problem is that the ss command shows connection status in this format.

tcp ESTAB 0 0 [::ffff:192.168.2.136]:5222 [::ffff:192.168.2.137]:50743 So when you check the address on line 151 it aways turns to ip6tables. Maybe it will work if you switch to netstat.

P.S.

If you switch to netstat setting SS_MISSING=true in ddos.sh the problem is gone. `