Tag Info

New answers tagged

7

One usually evoked solution is Fail2Ban: this is a system which uses the firewall rules (iptables) to block incoming connections from IP addresses from which some kind of exhaustive search attack is apparently in progress. This, of course, won't work with a distributed DoS, coming from thousands of distinct IP addresses. In general, very few things resist a ...


1

Sounds a lot like SYN Cookies. This is a method to prevent TCP SYN DoS attacks. Basically, when the server receives a TCP SYN packet, it creates a "cookie" with a hash of the values (specifically the source and sequence number), and then sends the ACK but does not create a "half open" connection. When the server receives a SYNC ACK, it uses the ...


0

I'm not convinced of the advantages of such a system but with regards to implementing it: You want a proxy application listening on the mentioned port so when requests for your web application come in, they go to the proxy first. The proxy analyses the request and employs your pattern matching logic. The proxy then forwards the request to the webapp (or ...



Top 50 recent answers are included