Anti-DDOS in Linux-Deflate

Article Title: Linux anti-DDOS-Deflate. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.

DoS-Deflate is a free service for defending against and mitigating DDoS attacks. It uses netstat to monitor and track the IP addresses that create a large number of network connections. When detecting that a node has exceeded the preset limit, this program will be disabled by the active filter or IPTABLES.

Or block these IP addresses.

DDoS-Deflate installation and configuration

1. Installation

Wget http://www.inetbase.com/scripts/ddos/install.sh

Chmod 0700 install. sh

./Install. sh

2. Configuration

The configuration file is/usr/local/ddos. conf. The default configuration is as follows:

FREQ = 1

No _ of_connections = 150

APF_BAN = 1

KILL = 1

EMAIL_TO = "root"

Bank_period = 600

Ip address whitelist:/usr/local/ddos/ignore. ip. list

3. Uninstall

Wget http://www.inetbase.com/scripts/ddos/uninstall.ddos

Chmod 0700 uninstall. ddos

./Uninstall. ddos

Done!