My site, devoted primarily to programming with my portfolio, articles, feelings etc.
Dec 20 2009
Hello.
Here is a script, which I use on my production servers to secure them a bit. I hope it will be useful to you. Script logs all dropped packets so that you can easily find out tye clutch should there be any. Additional FTP server setup will be necessary. For ProFTPD add the following line to /etc/proftpd.conf:
PassivePorts 65400 65534
Jul 30 2008
During several months server I was responsible for was under DDoS attack, that almost flooded it. Due to lacking Linux skills, I almost lost my hope in protecting it by myself and started to think about paying some specialist to protect my server.
But suddenly, I found a miraculos and VERY easy to install and use solutuons I want to share with you today.
Continue reading “[Linux] Installing automatic protection from DoS and DDoS attacks to your server”
Jul 23 2008
If you suspect, that your server is flooded, the first thing you need to do is to issue the following command:
netstat -ntu | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -nr
This will show you IP addresses (second column) and the total number of connections from each (first one). If you see, that you have too many connections from some IP address, you can block it by issueing the following command:
Continue reading “[Linux] Using netstat and iptables to manually detect and blacklist DOSers”
(2)
(16)
(1)
(1)
(6)
(7)
(1)