De Help Desk punt NL
Kennisbank
De Helpdesk > De Helpdesk > Kennisbank

(D)DoS Deflate

Oplossing About

(D)DoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses connected to the server, along with their total number of connections. It is one of the simplest and easiest to install solutions at the software level.

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
IP addresses with over a pre-configured number of connections are automatically blocked in the server's firewall, which can be direct iptables or Advanced Policy Firewall (APF). (We highly recommend that you use APF on your server in general, but deflate will work without it.)

En deze gelijk blokken: iptables -I INPUT -s IP_ADDRESS_HERE -j DROP

Notable Features

It is possible to whitelist IP addresses, via /usr/local/ddos/ignore.ip.list.
Simple configuration file: /usr/local/ddos/ddos.conf
IP addresses are automatically unblocked after a preconfigured time limit (default: 600 seconds)
The script can run at a chosen frequency via the configuration file (default: 1 minute)
You can receive email alerts when IP addresses are blocked.
Installation

wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh
Uninstallation

wget http://www.inetbase.com/scripts/ddos/uninstall.ddos
chmod 0700 uninstall.ddos
./uninstall.ddos
Questions?

Although most things are explained on this page, if you have any further questions, you may contact the original developer of the script.

Bijlagen:
install.sh.zip install.sh.zip

 
Was dit artikel bruikbaar? ja / nee
Gerelateerde artikelen how to install bfd (Brute Force Detection)
How TO install/Configure APF (Advanced Policy Firewall) Firewall
DDOS via Windows command prompt
DDoS-aanval
Nagios installeren op Fedora 12
Artikel details
Artikel ID: 171
Categorie: Beveiliging
Zoekwoorden
Datum toegevoegd: 2-Mar-2013 13:56:29
Aantal bekeken: 476
Beoordeling (Stemmen): Artikel beoordeeld 3.4/5.0 (22)

 
« Ga terug