DOS-Deflate - Mitigate (D)DOS atacks

[elix]

*Note*

The home of this project has been relocated to:

http://deflate.medialayer.com/

Thanks,

[Zaf]

Hi Friends,

a quick update was required of the script. It is now v 0.2

If you already installed the script, just re-install by issuing the following commands:
./uninstall.sh
./install.sh

If you dont have uninstall.sh:
wget http://www.inetbase.com/scripts/ddos/uninstall.sh
chmod 755 uninstall.sh

Changelog:
Changed the method of unbanning for the apf.
Fixed a few bugs

Thanks all

[@how@]

Thanks for the post.



Wael

[elix]

Glad to hear you like the post..

Zaf is currently working on a new version of this that will be *much* better.

Hello elix

how to stop system sending cron and ban IP email notice please?

We got thousands a day

thanks

[Zaf]

Open /usr/local/ddos/ddos.sh in your favorite editor (vi or pico) and search for the line which says "mail -s" (that is the command which sends you the mail). Put # at the beginning of that line. Save the file and exit the editor.
Done!

Sidenote: It is too bad if you have to block thousands of ips using this script. Infact, you are calling for trouble by doing so, as too many ips in the block list would make your VPS unstable.

Edit: Too many in my opinion would be anything more than 500.

[elix]

Originally Posted by Zaf

Open /usr/local/ddos/ddos.sh in your favorite editor (vi or pico) and search for the line which says "mail -s" (that is the command which sends you the mail). Put # at the beginning of that line. Save the file and exit the editor.
Done!

Sidenote: It is too bad if you have to block thousands of ips using this script. Infact, you are calling for trouble by doing so, as too many ips in the block list would make your VPS unstable.

Edit: Too many in my opinion would be anything more than 500.

Could it be that it is constantly trying to ban the same IP? Perhaps it'll be good to up the ban period?

[Zaf]

oh well elix, i really did not consider that aspect....the ban is indeed time bound, and yes you are right...if its the same ip.....one should actually ban it manually. What i was talking about was banning hundreds of ips at the same time and for longer period of time.

Hello

nope, it is mainly about "cron" email instead of ban IP notice....

I have disable it by puting a #, will this stop sending cron email too?

thanks

system keeps sending me cron notice? I gues this is controlled by system instead of script though? or any way to disable it? it nows sends cron notice every 2 minutes....