Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Let's say example.com is my real site, and fooexample.com is the porn site. fooexample.com are pointing to my ip. Now you could think, just don't mind it right. Well the thing is that they are driving load of traffic. Not only that, but my main domain example.com become unavailable after a couple of minutes and the only domain that work is either fooexample.com or none of those 2.

What i have done so far was using mod_rewrite to redirect the porn site to google but my domain still become unavailable. Blocking the ips served no result either.

I hope someone will be able to help me because this is a huge problem right now. Thanks.

share|improve this question
1  
Is everyone experiencing this problem? It sounds like you might have a problem with your domain resolution. –  ChrisF Jul 5 '12 at 11:24
    
I do think so, yes. –  Nicolas Martel Jul 5 '12 at 11:28
    
You should check this. Try networking.ringofsaturn.com/Tools/dig.php for example –  krissi Jul 5 '12 at 11:33
2  
Giving us the real domain names would help. Giving us an actual question to answer would also help. –  womble Jul 5 '12 at 11:35
    
The sites are www.tropikms.info (Mine) and www.sexymultiply.com (The porn site) For now i redirected the porn site to google using mod_rewrite but my domain still become unavailable. –  Nicolas Martel Jul 5 '12 at 11:41

3 Answers 3

You can not do too much about the traffic. You can contact the provider of the nameservice though.

The WHOIS of the site contians some info

share|improve this answer

Its not a DNS resolution issue, its probably a fault of their load balancer's or reverse proxy's. Best bet is to contact the technical contact of the domain through name.com (can get this information via a whois).

Alternatively you could ask if your host will change your IPs for you. You have a 30 second TTL on them so your downtime on the change would be minimal.

DNS Info

;; ANSWER SECTION:
www.sexymultiply.com.   300     IN      A       109.236.80.17


;; ANSWER SECTION:
www.tropikms.info.      30      IN      CNAME   tropikms.info.
tropikms.info.          30      IN      A       108.162.197.132
tropikms.info.          30      IN      A       108.162.197.32
share|improve this answer
    
I sent an email to worldstream for them to change my IP. Hopefully they will. –  Nicolas Martel Jul 5 '12 at 13:22

Several possible mitigations:

  1. Use a name virtual host so that your webserver only tries to serve requests for www.tropikms.info
  2. Use a firewall rule (such as iptables with a string match) to drop requests for the bad domain.
  3. since you're using apache, you might look into modsecurity; it can definitely help here.
  4. Use a caching reverse proxy such as nginx or varnish to ensure that requests for the unwanted domain never hit your "real" webserver. They will much better be able to handle the load.

Choosing between these options will depend on your familiarity with the tools, the urgency/immediacy of the problem and whether you're trying to protect from excessive CPU utilisation or bandwidth utilisation or what.

Here's an (untested) example for option #2:

iptables -I INPUT -p tcp --dport 80 -m string –string “<baddomainname.com>" -j DROP
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.