|
Originally Posted by rymax99
 Short from paying money (and in some cases, a lot) all you can do is make sure your admins aren't doing things to brings these attacks on (being too harsh), and maybe setting up a software firewall like CSF on your server. This does look like an attack, but it's certainly not a large one.
|
|
Originally Posted by MahdiGames
It's Stopped my server a while
|
|
Originally Posted by Mauzen
Its a vps, so you can set up some iptables connection limiter. In your case it would have noticed the unusual high incoming data, and drop all future packets from that IP. Its about the best thing you can do yourself to protect the server, and its all free, just ask ****** for that.
|
|
Originally Posted by Mauzen
Its a vps, so you can set up some iptables connection limiter. In your case it would have noticed the unusual high incoming data, and drop all future packets from that IP. Its about the best thing you can do yourself to protect the server, and its all free, just ask ****** for that.
|
, look this code
#!/bin/bash
IPT=/sbin/iptables
# Max connection in seconds
SECONDS=100
# Max connections per IP
BLOCKCOUNT=10
# ....
# ..
# default action can be DROP or REJECT
DACTION="DROP"
$IPT -A INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --set
$IPT -A INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --update --seconds ${SECONDS} --hitcount ${BLOCKCOUNT} -j ${DACTION}
# ....
# ..