I see a lot of people asking how to block bypasses on OVH .etc well here is some rules to block and get you started
hope this is useful
hope this is useful
Code
#Most common AMP attacks
iptables -t mangle -A PREROUTING -p udp -m multiport --sports 3283,37810,7001,17185,3072,3702,32414,177,6881,5683,41794,2362,11211,53413,17,1900,10001,389,137,5351,502 -j DROP
# Port 37810 | FN LAG
iptables -t mangle -A PREROUTING -p udp --sport 37810 -j DROP
# Port 7001 | OVH KILL
iptables -t mangle -A PREROUTING -p udp --sport 7001 -j DROP
iptables -I INPUT -p udp -m length --length 100:140 -m string --string "nAFS" --algo kmp -j DROP
# Port 17185 | OVH SLAP
iptables -t mangle -A PREROUTING -p udp --sport 17185 -j DROP
# Port 3072 | OVH DOWN & OVH DOWN v2
iptables -t mangle -A PREROUTING -p udp -m multiport --sports 3072,3702 -j DROP
iptables -t mangle -A PREROUTING -p tcp -m multiport --sports 3072,3702 -j DROP
# Port 3283 | OVH Crush V2
iptables -t mangle -A PREROUTING -p udp --sport 3283 -m length --length 1048 -j DROP
# Port 3283 | OVH Crush
iptables -t mangle -A PREROUTING -p udp --sport 3283 -m length --length 1048 -j DROP
# Port 32414 | NFO LAG
iptables -t mangle -A PREROUTING -p udp --sport 32414 -j DROP
# Port 177 | NFO LAG
iptables -t mangle -A PREROUTING -p udp --sport 177 -j DROP
# Port 6881 | NFO Clap
iptables -t mangle -A PREROUTING -p udp --sport 6881 -m length --length 320:330 -j DROP
# Port 32414 | R6 LAG
iptables -t mangle -A PREROUTING -p udp -m length --length 280:300 --sport 32414 -j DROP


