4 ms·
Yep but that never opens a full connection. You can filter on hosts who dont respond to an ACK after a certain amount of fails. Most machines don't have UDP se
by nickthemagicman 5y ago
Yep but that never opens a full connection. You can filter on hosts who dont respond to an ACK after a certain amount of fails.
Most machines don't have UDP services open to accept packets.
- MrStonedOne 5y agoall machines need udp opened to get response from ntp and dns. moving these to tcp would actually seriously help with filtering ddos, but good luck.
- nickthemagicman 5y agoYeah but as I understand it, Port 22 doesn't just sit open on a machine waiting for any connection. Running a quick netstat -p udp doesn't show any UDP entrys with LISTENING status.