security #2070

DDoS攻击

Added by 龙 辉 over 5 years ago. Updated over 5 years ago.

Status:进行中 Start date:05/24/2014
Priority:Normal Due date:05/31/2015
Assignee:- % Done:

0%

Category:- Spent time: -
Target version:-

Description

目前先手动配置拒绝主要IP地址发起的攻击,另,apt-get install libapache2-mod-evasive 临时方案。

Apache2 Prevent DDoS Attack With mod_evasive in Debian Squeeze
http://www.debian-tutorials.com/apache2-prevent-ddos-attack-with-mod_evasive-in-debian-squeeze

History

#1 Updated by 龙 辉 over 5 years ago

一些手动:
  • iptables -A INPUT -s 182.118.17.12 -j DROP
  • iptables -A INPUT -p tcp -i eth0--syn -m connlimit --connlimit-above 15 -j DROP
  • iptables -A syn-flood -j REJECT

Also available in: Atom PDF