New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
CSF won't help in case of DDoS but it's possible to protect the server from DoS.
Comment withdrawn from my lack of understanding the question.
@gbshouse Thanks for clarifying it for me. Sometimes, I wish people would be a bit more clear on their requests so we don't get into miscommunication issues like this one.
@Pwner - he's asking how to configure CSF (which is a firewall) to protect against DDoS
@KeyJey - try this one http://forums.ultratechhost.com/thread-177.html
You should take some valium or something to relax a little bit man, anyway u made me laugh :P
@alexvolk and @gbshouse I'm talking about a coherent use of the flood variables of CSF, I tried to use them last night and nothing much happened .... :S
Here you go http://woshka.com/blog/linux/centos/csf-firewall/protect-server-from-dos-attack-with-csf-feature.html
But as I said already it won't help against DDoS.
I know Alex, but for a low small attack may be useful, don't you think ?
Thanks !
Thanks @gbshouse, will tke a look !
I have actually developed a script which auto configure csf amung other secuituy feature with a cpanel installer, Also this should work on other systems that are centos based, Just don't installed cpanel when is asked yes or no obv the no if you have cpanel installed or don't want it.
Here is a link Installation Instructions:
wget http://samuraibit.com/projects/autosecure/harden.sh
chmod 0755 harden.sh
sh harden.sh
Thanks, I'll take a lok tonight.
Obviously, I will have to seek new places with DDoS protection for my DNSonly servers.
Cheers !
Cover your services with x4b.net.
CSF work for kloxo
CSF works with any linux system.
It isn't an effective tool to block DDoS, hands down. DoS perhaps, but DDoS, nope.
Yeah, I understood that, that's why I already moved one of the servers to a DDoS protected network
There is lots of option in CSF to prevent DDoS attack, Block some ports, change default port,etc and strict ip settings which can save you from newbies ddosers.
Most Newbie DDoS'ers use Booters, Stressers these can hit up to 2+Gbps
CSF, or IPtables wont help you here, once the port is full it can no longer accept connections resulting in a DDoS attack.
The only way to prevent this is migration or protection at the source.
Can you explain this for humans please ?
Your VPS's firewall can't drop packets fast enough. One or a few hosts, yes - many attackers will simply overwhelm your firewall. Pick some number of packets per second that your firewall can filter or packets per second that your NIC can receive - if the attack grows beyond that, the firewall or network simply can't keep up.
There is no proper solution for the DDOS. We've tried for DDOS protection by using CSF, However it doesn't achieved our expectation. Now, we have some professional DDOS protection. I would suggest go for some DDOS protection services .
Totally agree, I had same results playing with CSF.
I recommend searching for DDoS protected hosts or web hosting or VPS depending what your currently on right now.
Many small web hosts offer DDoS protection as a standard, you won't find those at those big major brand name company's such as hostgator. I can also offer you something here.
If you're looking for some cheap dedicated servers with DDoS protection look into awknet and or Sharktech, so you start is also cheap and also effective however the DDoS protection kicks in after about ~ 30 seconds
If you're looking for VPS I can offer you a solution for 1GB ram and unmetered bandwidth with KVM virtualization with DDoS protection of cource for $4 /month.
@nexmark I already chose one DDOS provider and ery happy with it, check the date of this post.
Thanks anyway !
Csf firewall is best for protect the servers from Ddos. you can use Csf firewall in Whm and Webuzo and Webmin. this is best plateform.