ufw-limit
Rate limit connections to deny an IP initiating 6 or more attempts within 30 seconds. tldr-pages
On Linux
Linux
Simulate a rule without applying it
sudo ufw --dry-run limit profileIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Rate limit a specific service by profile
sudo ufw limit profileIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Rate limit a specific port and protocol
sudo ufw limit 22/tcpIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Rate limit only from a specific source address or subnet
sudo ufw limit from 192.168.0.0/16 to any port 22 proto tcpIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Rate limit on a specific network interface
sudo ufw limit in on eth0 to any port 22IdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community
Delete a limit rule
sudo ufw delete limit service/tcpIdentifyTrips 1 Sigma rule: informationalSystem Network Discovery - Linux by Ömer Günal and remotephone, oscd.community