Install anti-DDOS for Apache by DoS-Deflate Kloxo

DoS Deflate basic monitoring and tracking of IP addresses are sending and establishing large amount of TCP network connections such as email mass, DoS pings, HTTP requests) by using “netstat” command, it is symptomatic of a denial-of-service attack. Upon detection of the number of connections from a single node exceeds a certain preset limit, the script will automatically uses APF or IPTABLES to ban and block the IP. Depending on the configuration, the IP address will be banned or unbanned APF iptables (only works on APF v 0.96 or better).

Installation and setup of (D) DOS-Deflate on the server is extremely easy. Simply login as root by open SSH access to the server, and run the following commands:

# wget http://www.inetbase.com/scripts/ddos/install.sh

# chmod 0700 install.sh

# ./install.sh

To uninstall D () DOS-Deflate, run the following command:
# chmod 0700 wget uninstall.ddos http://www.inetbase.com/scripts/ddos/uninstall.ddos ./uninstall.ddos

The configuration file for (D) DOS-Deflate is ddos.conf, and by default it will have the following values:

FREQ=1 FREQ = 1 NO_OF_CONNECTIONS=50 NO_OF_CONNECTIONS = 50 APF_BAN=1 APF_BAN = 1 KILL=1 KILL = 1 EMAIL_TO=”root” EMAIL_TO = “root” BAN_PERIOD=600 BAN_PERIOD = 600

Users can change any of these settings to suit different needs or usage pattern of different servers. Can also whitelist and permanently unblock (never ban) list their IP addresses in the directory / usr / local / DDoS / ignore.ip.list files. If you plan to implement and run the script interactively, users can set KILL = 0 so that any bad IP is not banned detection