There are many articles explaining many ways to attack webservers (generic or specific) and even listing general rules for mitigating such attacks, e.g.:

  • Do not accept connections with abnormally small advertised window sizes
  • Drop connections that send request longer than X seconds
  • Send RST or FIN after 30 seconds when client can't accept the data due to a full receive window
  • Limit number of connections from same IP
  • Drop more than X repetitive headers (such as Range)
  • etc etc...

Are there ready to use, tested on prod configuration examples specific to webserver (we use Apache and Nginx) or system wide (Linux) that cover most common attacks?


This link is a good one. As always, read it very carefully and do your homework - not all of this may suit your environment. http://www.cyberciti.biz/tips/linux-unix-bsd-nginx-webserver-security.html

  • Be careful. Some of the advice given in that article is plain bad, such as the advice which blocks the Bing search engine. – Michael Hampton Sep 14 '12 at 11:58
  • Hence the note about doing your homework. Your statement - that blocking Bing is bad - is exactly the broad brush advice I warn against above. All of this is case by case, and you need to evaluate it against your needs. – mcauth Sep 18 '12 at 13:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.