Iptable-based anti-DDos plugin

This plug-in can effectively defend against DoS attacks such as cc and syn semi-connections. In fact, it does not have the Interception Capability. It is based on the IPtables firewall and uses netstat + filtering rules to implement linkage with the IPtables firewall. In the event of a malicious denial of service attack, the software will analyze the attempt to connect to the source in real time. When the connected IP Address has an abnormal connection, the plug-in automatically adds it to the iptables firewall entry for interception. At the same time, the attack IP address is recorded in the planned unblocking file. When the specified time is reached, the plug-in will automatically unseal the corresponding IP address from the IPtables firewall. In the basic test process, it has obvious effects such as coping with single-IP concurrent connection attacks and single-IP syn flood. However, it is not suitable for malicious attacks that randomly forge IP addresses, but can defend against Lightweight DDOS attacks.

This software took a week to finish writing. During the basic test, the performance was acceptable. However, the possibility of a BUG is not ruled out.

System Structure

Installation and use:

The software installation method is very simple, download the software decompress (tar zxvf DDos_firewall-v1.0.0.tar.gz), enter the main directory, find autosetup. sh, run automatic installation can be!

Running environment:

CentOS 32bit or 64bit, RedHat 32bit or 64bit, Fedora 32bit or 64bit, which is not tested in other linux systems.

Startup method:

Dd_start {start | stop | restart | status}

The software must be installed in the specified path (/usr/local/). The installed directories are:

/Usr/local/ddos_drop/bin, which is the execution file directory

/Usr/local/ddos_drop/conf, configuration file directory

/Usr/local/ddos_drop/logs, record the file directory

The downloaded C files must be compiled by gcc. Start autosetup. sh to complete gcc compilation and installation!

Software Download:

Free in http://linux.bkjia.com/

The username and password are both www.bkjia.com

The specific download directory is/pub/2011/08/09/iptable-based anti-DDos plug-in/

1 2 Next Page