up vote 1 down vote favorite
share [g+] share [fb]

I have a problem with Lighttpd because someone started to use some Web downloader from very good connection and it blocked my whole website. Is there any way to protect Lighttpd from DDOS attacks and flooding?

link|improve this question
61% accept rate
If you vote for closing please write also why ok? – Tomaszs Oct 3 '09 at 20:30
1  
I didn't vote to close, but this belongs to serverfault. – LiraNuna Oct 3 '09 at 20:33
1  
DOS and DDOS are diferent term.DOS-Denial of service DDOS-Distributed Denial of Service.DOS may be caused by hacker attacks without multiple requests – AndrewSmith Oct 3 '09 at 20:41
feedback

migrated from stackoverflow.com Oct 3 '09 at 21:16

This question came from our site for professional and enthusiast programmers.

4 Answers

up vote 1 down vote

Lighttpd supports overall and per-connection throttling. Alternatively, you can limit bandwidth by IP adddress but that must be done in the firewall.

Go to http://www.cyberciti.biz/tips/lighttpd-set-throughput-connections-per-ip.html for an excellent, detailed HOWTO.

link|improve this answer
feedback
up vote 1 down vote

iptables and --connlimit

link|improve this answer
feedback
up vote 0 down vote

If this is coming from a single 'user' then it isn't DDOS (distributed denial of service), just DOS (denial of service). A DOS attack is easier to defend against by simply blocking the IP that is causing the problem. Otherwise they can be difficult to defend against and may require blocking of IP ranges temporarily.

Blocking can be done using iptables and will be OS dependant.

link|improve this answer
feedback
up vote 0 down vote

There is also mod_evasive that you can use.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.