Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I'm getting dos on a dedicated server with windows+apache, ive asked support to install a firewall and got a cisco pix 501, the attacks are on port 80 to a certain site, what can I do to block it?

I thought of putting a cap on amount of connections Disallowing access for certain ip ranges (the attackers use mainly ukraine and india)

Any ideas?

more than that, how do I do it with the cisco? any command lines would help

share|improve this question

marked as duplicate by Tom O'Connor Aug 25 '13 at 21:30

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

They gave you a pix 501 to stop a DDoS ? outch sorry but that's a crappy old SOHO class firewall it will probably make things worse. Tell them to filter the traffic upstream of your connection

share|improve this answer
Indeed. Especially since the PIX line is officially dead and has published compromisable vulnerabilities available. – Scott Pack Feb 12 '11 at 1:46

Not the answer you're looking for? Browse other questions tagged or ask your own question.