Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For example an admin page that should not be visited unless with special cookie or query string token. The point being that anyone who tried and failed would likely be with bad intention. Or when the connection has ddos behavior.

Is there a way that if you determine that request is an evil one, you withhold that connection as long as possible, and return a package as large as possible , in a way that is without side effect to the server? Maybe redirecting to other special website? Or other better strategy? (I am using Nginx. But I guess this question is quite general.)

share|improve this question

closed as off-topic by pauska, joeqwerty, Dan, RobM, Ward Oct 27 '13 at 20:03

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – pauska, joeqwerty, Dan, Ward
If this question can be reworded to fit the rules in the help center, please edit the question.

I should have make it more clear that I ask this question only for the technicality or how-to. – user2643506 Oct 27 '13 at 18:42

"Punishing" someone seems like an idea that could backfire. Perhaps you'd be happy just to block them? For that look at Fail2Ban.

share|improve this answer
I just had to upvote this :D – wlf Oct 27 '13 at 17:49

Not the answer you're looking for? Browse other questions tagged or ask your own question.