Recently I've got a lot of small scale DoS attacks. I am wondering what iptables rules should I use to counter the most common DoS attacks, and generally secure my web server.
The web server sports Varnish -> nginx/php5 -> memcached -> mysql
I tried some generic receipts but they also block access to my database server which sits at a remote server, so I just flushed the suggested rules, and now feel a bit barehanded and volnurable when I see only fail2ban on iptables.
So appreciate your rules to block the most common attack vectors.