iptables 中的 IP 已被阻止，但 DDOS 仍在继续

Question

我今天在网络服务器上遇到了 DDOS 运行 debian sequeeze 并在 iptables 中阻止了各种 IP 地址，如下所示：

iptables -A INPUT -s 169.50.5.42 -j DROP

但似乎并没有丢弃来自这些 ip 的流量。

使用 iptables -L 列出所有规则给出以下输出：

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
fail2ban-ssh  tcp  --  anywhere             anywhere            multiport dports ssh 
fail2ban-pureftpd  tcp  --  anywhere             anywhere            multiport dports ftp 
fail2ban-dovecot-pop3imap  tcp  --  anywhere             anywhere            multiport dports pop3,pop3s,imap2,imaps 
DROP       all  --  169.50.5.42-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.45-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.37-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.36-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.38-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.39-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.45-static.reverse.softlayer.com  anywhere            
DROP       all  --  169.50.5.42-static.reverse.softlayer.com  anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain fail2ban-dovecot-pop3imap (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere            

Chain fail2ban-pureftpd (1 references)
target     prot opt source               destination         
RETURN     all  --  anywhere             anywhere            

Chain fail2ban-ssh (1 references)
target     prot opt source               destination         
DROP       all  --  43.229.53.60         anywhere            
RETURN     all  --  anywhere             anywhere

我错过了什么吗？

Answer 1

我可以自己回答。显然需要一些时间来在内部应用所有更改。一分钟左右后，规则生效。

iptables 中的 IP 已被阻止，但 DDOS 仍在继续

Blocked IPs in iptables but DDOS still is going on

iptables

ddos