1

This question in not duplicated, I tried everything that was published on stackexchange websites, but could not fix my problem.

I have a web server. OS: Ubuntu 15.10 Configured on Apache2 Ram: 1.5 GB CPU: 3.6 GHz

I check my website protection, but there were no vulnerabilities, after that decided to check protection against DoS, I used hulk.py modified version, see it here: Hulk.py.

My server got down, after that I used cloudflare(free) protection, but nothing changed, I used simple iptables commands:

sudo iptables -A INPUT -m limit --limit 50/minute --limit-burst 200 -j ACCEPT
sudo iptables -A INPUT -j REJECT
sudo iptables -A INPUT -p tcp --dport 80 -m state --state NEW -m limit --limit 50/minute --limit-burst 200 -j ACCEPT
sudo iptables -A INPUT -m state --state RELATED,ESTABLISHED -m limit --limit 50/second --limit-burst 50 -j ACCEPT
sudo iptables -A INPUT -j REJECT

I used Deflate DDoS Script, but I wasn't able to stop it, no problems with slowloris attack, but when I am trying to test my

  • 3
    It's really easy to saturate a network connection. At that point, anything you do on your server is going to have no effect - most of the traffic never sees your server. You should be looking to prevent DoS attacks at the network level, and most VPS providers are unlikely to offer this - they tend to aim for the budget end of the market. – Matthew Feb 22 '16 at 16:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.