Comments on: [Linux] Installing automatic protection from DoS and DDoS attacks to your server

By: FractalizeR

FractalizeR — Sun, 11 Jan 2009 09:29:18 +0000

Glad it helped ddos.sh is not written by me so I cannot change the source. But thanks for a comment.

By: bristol

bristol — Fri, 09 Jan 2009 13:35:40 +0000

Fixed:

Change line 117 in ddos.sh to:
netstat -ntu | awk ‘{print $5}’ | cut -d: -f1 | sed -n ‘/[0-9]/p’ | sort | uniq -c | sort -nr > $BAD_IP_LIST

This will pass though only lines containing numbers (i.e. IP addresses)

By: bristol

bristol — Wed, 07 Jan 2009 22:50:35 +0000

Thanks for your instructions!
I followed them and have received a couple emails from the script, and both report something like:

Banned the following ip addresses on Wed Jan 7 22:15:01 UTC 2009
36 with 36 connections

There seems to be something wrong. Any ideas?
Thanks.

By: what is the better way to protect my server from DDos Attack - Security - The UNIX and Linux Forums

Thu, 28 Aug 2008 07:50:15 +0000

[...] simple (D)DOS attacks. Script itself is here. I wrote a small article on how to install and use it here. Next step can be installing mod_dosevasive for Apache to get rid of HTTP DDOS [...]