<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">You sure it was just a http attack?
Several hundred requests in a few minutes shouldnt really put it
on it's knees, unless the server is a VPS with low memory/CPU
usage limits, or the server itself is low on resources. <br>
<br>
If you're using Apache, you should check into several modules to
lock down your server. In this case, check out mod_evasive. <br>
<br>
Server firewall wise:<br>
I also suggest fail2ban and also CSF <br>
<a class="moz-txt-link-freetext" href="http://configserver.com/cp/csf.html">http://configserver.com/cp/csf.html</a><br>
<br>
Also you could try CloudFlare, but I've seen that cause a lot of
problems at the same time. If you have a low traffic web site, I
would suggest it. But if you ever expect a surge of traffic,
CloudFlare could cause you headaches.<br>
<br>
Another idea is that if you're server is at a datacenter, they can
help on their end also. <br>
<br>
On 3/18/2013 2:19 PM, J. Wade Michaelis wrote:<br>
</div>
<blockquote
cite="mid:CAKcSjiiEZ7KeQw+dg6pw=HfAn=ROg_HvPtwis5jyjb6Ddrxzkw@mail.gmail.com"
type="cite">
<div>I have a CentOS web server that has recently been brought to
a halt on two separate occasions. Checking the access.log, it
appears that it was a Denial of Service (DOS) attack (hundreds
of HTTP requests in a very short time, all from a single IP
address).</div>
<div><br>
</div>
<div>I want to prevent these types of attacks from bringing the
server to its knees. We have a hardware firewall (SonicWall) in
place, but it isn't quite new enough to run the firmware that
allows rate-limiting.</div>
<div><br>
</div>
<div>I have found a number of tutorials that show how to do this
type of thing with IPTABLES. Is there a better solution? </div>
<div><br>
</div>
<div>Supposing I go with IPTABLES, do I need to include rules to
allow FTP and SSH (the only other services on the server)? </div>
<div><br>
</div>
<div>Would any of you be willing to assist me with this?</div>
<br clear="all">
<div>Thanks,<br>
~ j.<br>
<a moz-do-not-send="true"
href="mailto:jwade@userfriendlytech.net">jwade@userfriendlytech.net</a></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
KCLUG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:KCLUG@kclug.org">KCLUG@kclug.org</a>
<a class="moz-txt-link-freetext" href="http://kclug.org/mailman/listinfo/kclug">http://kclug.org/mailman/listinfo/kclug</a></pre>
</blockquote>
<br>
</body>
</html>