Linked Questions

-2
votes
0answers
30 views

How to block a DDoS attack? [duplicate]

My website is under a DDoS attack with bots. They are all coming in from different IPs so I can't block them all. Is it possible to make a CAPTCHA or a password just to connect to the site first for ...
0
votes
1answer
3k views

Iptables ratelimit UDP DOS attacks [duplicate]

Well, I've been a victim of Ddos attacks and I really can't figure out how to avoid it. On some machines it works, while on some it doesn't or probably I'm doing it wrong in some way, Attackers are ...
0
votes
2answers
542 views

Prevent scanning of the Apache's /default directory [duplicate]

I have two directories, under /var/www/vhosts: mydomain/ and default/. Files in default directory can be accessed using IP address of our server. I have checked Apache log and somebody is ...
0
votes
1answer
1k views

Best Practice for captcha based protection against D.O.S to Nginx Proxy [duplicate]

The idea is explained here In simple words, Nginx Proxy plays the role of load balance and transmits the HTTP/HTTPS requests to servers. If the number of request times within a certain period from ...
2
votes
1answer
151 views

How can I implement an ip whitelist to protect my server? [duplicate]

I'm going to start running a gameserver soon and I want a way to reduce the the damage of a denial of service attack. I want to make it so when someone joins the game their ip adress is added to a ...
4
votes
1answer
223 views

Windows server 2008, a very small DDoS is able to kill my server [duplicate]

So I have this i7 3.2Ghz 6-core dedicated server running Windows Server 2008, with a 1Gbps internet speed. Everything runs fine and nice, and the machine is strong enough to handle even up to 700 ...
0
votes
1answer
181 views

iptables connection limit does not work on debian [duplicate]

I'm trying to set up some basic DOS protection. The following iptables rule works on a CentOS box but NOT on debian (wheezy). #limit the parallel http requests to 50 per class C sized network ...
-1
votes
0answers
5 views

What is the optimal (best) value for PORTFLOOD in CSF firewall? [duplicate]

What is the optimal value or best value for PORTFLOOD in CSF firewall. This setting is for shared hosting environment, where we have hosted 100s of small websites. Mainly we want to prevent it from ...
0
votes
2answers
294 views

netfilter ip_conntrack and (d)DoS [duplicate]

Does using netfilter.ip_conntrack in the kernel in anyway help mitigate (d)DoS attacks or does it make it worse? I know it adds the ability to track connections and such but just curious if it helps ...
1
vote
2answers
323 views

PHP web hosting: how to prevent clients to DOS/DDOS? [duplicate]

I'm providing a partial web hosting solution where my clients may upload and execute their own php scripts. Besides the security routine I'll have to check (off topic here) I would like to know ...
-1
votes
1answer
371 views

TCP DOS: How to terminate CLOSE_WAIT connections? [duplicate]

One of my servers is getting DOS'ed - there are a large number of connections in the CLOSE_WAIT state which are preventing legitimate users from connecting to the system. So is there any way to close ...
4
votes
2answers
102 views

Will MX records with a longer TTL help mitigate effects of DoS attack? [duplicate]

We have our email hosted at Google Apps, and have our DNS servers for the domain setup at Namecheap. About a month ago our website went down (not a big deal, since it's most just a contact info ...
1
vote
2answers
216 views

blocking udp attack ip with iptables [duplicate]

I was trying to block an ip of ( network stresser tool - a ddos websites selling ddos bots by seconds online ) the first one i was trying to block with iptables : iptables -A INPUT -d 173.193.26.73 ...
4
votes
3answers
385 views

I know how to scale my software, but how to prevent downtime because of network outages? [duplicate]

We are running rather large LAMP sites which scale well software wise. We use redundant load balancers in front of a bunch of webservers using MySQL via a proxy in master-slave-slave-slave. We are ...
2
votes
6answers
573 views

Securing against DDoS [duplicate]

My client would like to have his eCommerce (custom-made) site secured from DDoS attacks. What strategies can I implement? There are multiple forms in the purchasing flow --- searching, drilling-down ...

15 30 50 per page