diff --git a/include/functions b/include/functions index d8323f6..2ae4c55 100755 --- a/include/functions +++ b/include/functions @@ -163,7 +163,7 @@ function apply_ipv4_hack { # Rate limit NTP DDOS UDP traffic using rules provided on the nanog list by # pashdown@xmission.com $IPTABLES -N NTP - $IPTABLES -I 1 BLACKHOLE -m recent --set --name ntpv4blackhole --rsource + $IPTABLES -I BLACKHOLE 1 -m recent --set --name ntpv4blackhole --rsource $IPTABLES -A NTP -m recent --update --seconds 5 --hitcount 20 --name \ ntpv4 --rsource -j BLACKHOLE $IPTABLES -A NTP -m recent --update --seconds 5 --hitcount 2 --name \