Article 5B8H2 Question regarding IPTables - Heartbleed Attack

Question regarding IPTables - Heartbleed Attack

by
mb1994
from LinuxQuestions.org on (#5B8H2)
I am creating an IP rule to block potential heartbeat attacks. I see online that the standard iptable to block a heartbeat attack is: iptables -t filter -A INPUT -p tcp --dport 443 -m u32 --u32 \ "52=0x18030000:0x1803FFFF" -j DROP

I was wondering if you could assist me with understanding what "m u32 --u32 \ "52=0x18030000:0x1803FFFF" means. I understand that this is using the u32 iptables moudle but have no idea what "52=0x18030000:0x1803FFFF" means? Where does "52=0x18030000:0x1803FFFF" come from?latest?d=yIl2AUoC8zA latest?i=Vrbm3od0fk4:iKQvorIaYjs:F7zBnMy latest?i=Vrbm3od0fk4:iKQvorIaYjs:V_sGLiP latest?d=qj6IDK7rITs latest?i=Vrbm3od0fk4:iKQvorIaYjs:gIN9vFwVrbm3od0fk4
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments