Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I have a problem with Lighttpd because someone started to use some Web downloader from very good connection and it blocked my whole website. Is there any way to protect Lighttpd from DDOS attacks and flooding?

share|improve this question

migrated from Oct 3 '09 at 21:16

This question came from our site for professional and enthusiast programmers.

marked as duplicate by Tom O'Connor Aug 25 '13 at 21:38

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

DOS and DDOS are diferent term.DOS-Denial of service DDOS-Distributed Denial of Service.DOS may be caused by hacker attacks without multiple requests – AndrewSmith Oct 3 '09 at 20:41

Lighttpd supports overall and per-connection throttling. Alternatively, you can limit bandwidth by IP adddress but that must be done in the firewall.

Go to for an excellent, detailed HOWTO.

share|improve this answer

iptables and --connlimit

share|improve this answer

If this is coming from a single 'user' then it isn't DDOS (distributed denial of service), just DOS (denial of service). A DOS attack is easier to defend against by simply blocking the IP that is causing the problem. Otherwise they can be difficult to defend against and may require blocking of IP ranges temporarily.

Blocking can be done using iptables and will be OS dependant.

share|improve this answer

There is also mod_evasive that you can use.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.