This question already has an answer here:
- I am under DDoS. What can I do? 4 answers
I was searching for a solution a long time but cant find anything useful.
My webserver is secured by a firewall (iptables with ufw userinterface). Default is deny all and only some ports are open. The server is monitored by prtg.
My problem is, that someone is trying to access the blocked ports a few times per seconds. If this happens, the monitoring tool reports a ping timeout.
The simple DDOS deflate script is configured to block on more than 100 requests. This amount is not reached.
My question: is it possible to prevent this incident? Is a block by the firewall this performance hungry?