have any way to fixe the phpddos problem

[lylover]

i have use csf
but the can't block all out udp port

and i have use

iptables -A OUTPUT -p udp -j REJECT

to block the udp port

but the csf some time will auto delete


i have use other way php.ini disable fsockopen

but some cms need use fsockopen

now have any good way to fix the problem

thanks

 

[zEitEr]

Hello,

It is possible to configure CSF to block ports separately based on UID. So it's possible to allow outgoing connections for trusted users only (of course in this case PHP scripts should run not from name of apache user but from name of an account owner).

By the if you are using CSF you should add/remove/modify iptables rules only with csf, you should not call iptables directly.