Variation 1: Block SSH Connection Attempts from a Single IP Address Exceeding 5 per Minute -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -m recent --name sshbrute --update --seconds 60 ...
Explanation: This rule blocks incoming DNS requests with large response packets, typical of DNS amplification attacks. # Variation 2: Rate Limit Incoming DNS Queries to Prevent Amplification -A INPUT ...