DDOS Attacks

[eluser]TheMHouse.In[/eluser]
hi,
I have been witness to several such attacks. The fastest and easiest way is when you have good equipment such as CISCO. The most rapid cessation of such attacks is a type of limiting traffic in certain areas. As you know, every country has an area and can be restricted directly. Thus drastically reducing the damage. When you notice that everything is okay you can remove the restriction. :coolhmm:

The other way is by using iptables to stop DDos attacks. Itself iptables blocking ip address, but first needs to know whether they are attacked.
With this command we can see all IP addresses and their attendance:
netstat-anp | grep 'tcp \ | udp' | awk '(print $ 5)' | cut-d:-f1 | sort | uniq-c | sort-n

We can also make some changes in / etc / httpd / conf / httpd.conf file for the timeout, keepalive, server spawn
This command will show all connections to port 80:
netstat-n | grep: 80 | wc-l
Install your http://www.gropp.org/?id=projects&sub=bwm-ng "... a small and simple console-based live bandwidth monitor for Linux, BSD, Solaris, Mac OS X, Windows and others."
I hope I helped and I apologize for bad English.
Best regards
m.Aleksandrov :coolsmirk: