Re: [bitfolk] Strange DDOS attack?

Top Page
Author: Andy Smith
Date:  
To: users
Subject: Re: [bitfolk] Strange DDOS attack?

Reply to this message
gpg: Signature made Tue Dec 31 11:55:23 2013 UTC
gpg: using DSA key 2099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
On Tue, Dec 31, 2013 at 12:34:58AM +0000, Max B wrote:
>
> % cat >> /etc/hosts.deny
> ALL: ALL except your.home.ip.here


Apache isn't usually built with tcpwrappers support, nor is any
other web server I'm aware of. You could do so but I think there are
better solutions depending on what you want to achieve.

If you wanted to block these hosts from polluting logs and are
already running Fail2Ban for that purpose for SSH connections, then
I would use Fail2Ban for that as well.

Cheers,
Andy

--
http://bitfolk.com/ -- No-nonsense VPS hosting