Brute force attack make my server down

[Lotanas]

Hey guys,
everyday my server get attacked ,
i instaled the csf firewall and i follow these steps to ban ips automaticly : http://www.directadmin.com/forum/showthread.php?t=41163&p=209521#post209521
and csf ban about 21 IPs , but today my server was down due to a high load average because the brute force attack .
so please can you tell me how i can resolove this problem.
im sorry for my bad english
thank you

 

[chatwizrd]

Purchase ddos protection from a 3rd party provider.

 

[zEitEr]

Hello,

You should follow suggested advice to purchase ddos protection from a 3rd party provider. That might be a good solution. Alternatively we could try to solve your issue here (in this case it might be not as quick as you might want, and I'd guess you won't get any guarantees):

So, what service is under attacks?

so please can you tell me how i can resolove this problem.
im sorry for my bad english
thank you

 

[Lotanas]

what is the price for a DDoS protection service, my server get down everyday and i must reboot it manually

 

[Lotanas]

there is a script to restart the server automaticcly once the load average is > 8 for example ?
i found this post : http://www.webhostingtalk.com/showthread.php?t=971304
i could follow these steps or not ?

 

[zEitEr]

what is the price for a DDoS protection service, my server get down everyday and i must reboot it manually

The public forums is not the right place to ask such questions. Please use PM instead.

 

[DirectAdmin Support]

Hello,

Just some information which may be useful:

1) General info on Brute Force Attacks and DA's tools to help with them, eg: DA's iptables or use CSF.

2) If you're looking to restart a service upon high load, as of 1.42.0, DA has a hook script which will be called if it exists:
http://www.directadmin.com/features.php?id=1354

sample code

#!/bin/sh
L=/root/load_spike.log
echo "`date`: Restarting services:" >$L
/etc/init.d/httpd restart >$L 2>&1
/etc/init.d/exim restart >$L 2>&1
/etc/init.d/dovecot restart >$L 2>&1
/etc/init.d/mysqld stop >$L 2>&1
sleep 4
/etc/init.d/mysqld start >$L 2>&1
echo "`date`: Restarts done" >$L
exit 0;

But it's possible that even more tricks might need to be done, which might be a case-by-case basis, eg: blocking entire IP ranges if IPs from that range is a common problem, etc..

John