#
# /etc/shorewall/DNSDDOS
#

use Shorewall::Chains;

add_rule $chainref, q(-m string --algo bm --from 29 --to 31 --hex-string "|010000010000000000000000020001|" -j DROP);
add_rule $chainref, q(-m string --algo bm --from 29 --to 31 --hex-string "|000000010000000000000000020001|" -j DROP);
add_rule $chainref, q(-j ACCEPT);