"iptables example"

  • block output sctp packet
iptables -A OUTPUT -p sctp -s 192.168.166.250 -d 192.168.165.86  -j DROP
  • block COOKIE_ECHO of sctp
iptables  -A INPUT -i lo -p sctp --dport 10000 --chunk-types  ALL COOKIE_ECHO -j DROP