50 пакетов типа ntp в секунда с 1 ip

[Усики]

Код: [Выделить]

naykon@naykon-System-Product-Name:~$ sudo iptables-save
[sudo] password for naykon:
# Generated by iptables-save v1.4.18 on Mon Mar 31 14:09:14 2014
*mangle
:PREROUTING ACCEPT [95697438:12361063414]
:INPUT ACCEPT [86763135:8511523419]
:FORWARD ACCEPT [8900504:3847083377]
:OUTPUT ACCEPT [95609931:34604258421]
:POSTROUTING ACCEPT [104510433:38451341636]
-A FORWARD -o ppp0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:65495 -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Mon Mar 31 14:09:14 2014
# Generated by iptables-save v1.4.18 on Mon Mar 31 14:09:14 2014
*filter
:INPUT ACCEPT [67401318:6595453543]
:FORWARD ACCEPT [8623404:3752036640]
:OUTPUT ACCEPT [74463013:27345388432]
:REJECT_FLOOD28 - [0:0]
:fail2ban-ddos - [0:0]
:fail2ban-ssh - [0:0]
-A INPUT -p udp -m multiport --dports 27018,27010 -j fail2ban-ddos
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -i ppp0 -p udp -m udp --dport 27018 -m length --length 28 -j REJECT_FLOOD28
-A INPUT -i ppp0 -p udp -m udp --dport 27010 -m length --length 28 -j REJECT_FLOOD28
-A INPUT -p udp -m udp --dport 123 -j DROP
-A FORWARD -d 192.168.1.2/32 -i eth2 -o eth1 -p udp -m udp --dport 27010:27015 -j ACCEPT
-A FORWARD -d 192.168.1.2/32 -i eth2 -o eth1 -p tcp -m tcp --dport 27010:27015 -j ACCEPT
-A REJECT_FLOOD28 -j LOG --log-prefix "IPTABLES-FLOOD LENGTH 28: " --log-level 6
-A REJECT_FLOOD28 -j DROP
-A fail2ban-ddos -j RETURN
-A fail2ban-ssh -j RETURN
COMMIT
# Completed on Mon Mar 31 14:09:15 2014
# Generated by iptables-save v1.4.18 on Mon Mar 31 14:09:15 2014
*nat
:PREROUTING ACCEPT [3108602:211685608]
:INPUT ACCEPT [1564526:86842866]
:OUTPUT ACCEPT [40591:2470467]
:POSTROUTING ACCEPT [45804:2745594]
-A PREROUTING -d 194.79.60.168/32 -p tcp -m tcp --dport 27010:27015 -j DNAT --to-destination 192.168.1.2
-A PREROUTING -d 194.79.60.168/32 -p udp -m udp --dport 27010:27015 -j DNAT --to-destination 192.168.1.2
-A POSTROUTING -s 192.168.1.0/24 ! -d 192.168.1.0/24 -j MASQUERADE
COMMIT
# Completed on Mon Mar 31 14:09:15 2014
naykon@naykon-System-Product-Name:~$

Сервер CSS стоит на машине с Ubuntu к ней же подключено ppp0 соединение от провайдера. Далее по eth раздаю интернет с Ubuntu на роутер (думаю это уже не имеет значения).

[Усики]

и тишина))