[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-relays] Re: DDoS solution for Tor nodes - nftables variant implemented



On 13/09/2026 12:42, boldsuck via tor-relays wrote:
Thanks for the reply

- Use `auto-merge` and `interval` flag in dynamic sets.

This gives "(Operation not supported)" here, likely due to the dynamic flag.

> - Block crazy packets like this in line 172, in chain 'ingress' before conntrack:

This would be a larger task, for the future. For now I like to stabilize the current setup. Since today I was proven (again) that without the ruleset my tiny relays are walking deads. With the ruleset they do all perform.


--
Toralf
_______________________________________________
tor-relays mailing list -- tor-relays@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-relays-leave@xxxxxxxxxxxxxxxxxxxx