Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm aware that by sending frequent requests to my site from a loop, some body can put my site down. How I can prevent that? Any ideas will really help me.

share|improve this question

migrated from stackoverflow.com Sep 23 '11 at 6:08

This question came from our site for professional and enthusiast programmers.

closed as not a real question by Jason Berg, Ward, Wesley, RobM, andol Sep 23 '11 at 7:01

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
This is really a serverfault question. In the meantime you might want to Google the term DOS or "Denial of Service" attacks for more information. This isn't going to be a quick and easy answer. –  JohnFx Sep 23 '11 at 5:53
    
man iptables is your friend –  Eric Fortis Sep 23 '11 at 5:54
    
In addition to JohnFx comment, you may also Google for DDOS or "Distributed Denial of Service" attacks for even more information. –  Darin Dimitrov Sep 23 '11 at 5:54
add comment

1 Answer

up vote 0 down vote accepted

Point blank. There's no way to "stop" an attack. But you can limit the effectiveness. There are also multiple types of DDoS attacks so you could go the cover all bases route and plan for every possible attack; even ones that are very rarely used. However the attack that has been making most headlines(Visa/Mastercard/Paypal) was the LOIC(Low Orbit Ion Cannon) attack which can utilize three different aspects - TCP, UDP, and HTTP GET requests. Now you can make a firewall rule to detect UDP and TCP versions of LOIC, but that can then place great overhead on your firewall(depending on how big the hive is). Or you can use a hashlimit on iptables so that you're able to limit the number of packets per minute. Your question is extremely vague so research a bit more to isolate what you're looking for and go from there.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.