Anti Flood attack?
- Thread starter saosangmo
- Start date
BBM
Verified User
A "D"DOS attack will come from many different IP's.
Your attack comes from one IP it seems.
I'm not to experienced with CSF/LPF, but doesn't it have some sort of flood-prevention for this type of hits?
Your attack comes from one IP it seems.
I'm not to experienced with CSF/LPF, but doesn't it have some sort of flood-prevention for this type of hits?
nobaloney
NoBaloney Internet Svcs - In Memoriam †
I've renamed the thread to indicate the emphasis on flood prevention.
You can check the CSF configuration from DirectAdmin. Search for the word flood.
One section to look at: Port Flood Settings
Jeff
You can check the CSF configuration from DirectAdmin. Search for the word flood.
One section to look at: Port Flood Settings
Jeff
@how@
Verified User
Only hardware help you from flood no app will help you, so don't wast your time.
Arieh
Verified User
In case it's just one IP address trying to flood your webserver, CSF works fine.
nobaloney
NoBaloney Internet Svcs - In Memoriam †
As I see it, you're both right. If it's too large an attack you probably want to block it upstream from your server if your upstream wll cooperate and has the equipment. Simply because it's possible to overload your local system if you're relying on your own firewall.
Best bet is for your upstream to null-route any requests from that IP#. But many of us are likely on our own.
Jeff
Best bet is for your upstream to null-route any requests from that IP#. But many of us are likely on our own.
Jeff
Richard G
Verified User
Could it be a slowloris attack in this case?