Configure Suricata as IPS to prevent host from SYN Flood

[nurchalizaaa (Nurchaliza)]

@vjulien

As you can see in the iptables -v -L output, the NFQUEUE rule starts with two zero’s: one counts packets, the other bytes. As long as these are 0 Suricata will not receive any traffic.

So what thing(s) that could be went wrong from my configuration?

Here’s the topology:

but im still figuring out the solution for hping3. if its done then it will be easier to solve the LOIC one.