Re: DOS prevention

Jeremy Fowler <[email protected]>
Newsgroups gmane.user-groups.linux.kansascity
Message-ID <CAHvzfHWTpiA_pnBOcs-3sC6234CSfAbmXQapuwfZk9oR_pnoEw@mail.gmail.com>
I would pay an outside service to handle the heavy lifting...
http://www.incapsula.com/ddos-protection-plan


On Mon, Mar 18, 2013 at 2:19 PM, J. Wade Michaelis <
[email protected]> wrote:

> I have a CentOS web server that has recently been brought to a halt on two
> separate occasions.  Checking the access.log, it appears that it was a
> Denial of Service (DOS) attack (hundreds of HTTP requests in a very short
> time, all from a single IP address).
>
> I want to prevent these types of attacks from bringing the server to its
> knees.  We have a hardware firewall (SonicWall) in place, but it isn't
> quite new enough to run the firmware that allows rate-limiting.
>
> I have found a number of tutorials that show how to do this type of thing
> with IPTABLES.  Is there a better solution?
>
> Supposing I go with IPTABLES, do I need to include rules to allow FTP and
> SSH (the only other services on the server)?
>
> Would any of you be willing to assist me with this?
>
> Thanks,
> ~ j.
> [email protected]
>
> _______________________________________________
> KCLUG mailing list
> [email protected]
> http://kclug.org/mailman/listinfo/kclug
>

_______________________________________________
KCLUG mailing list
[email protected]
http://kclug.org/mailman/listinfo/kclug
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.