Vps, Cloud host, independent host UDP contract processing process _win Server

The UDP contract is usually by the hacker through the PHP execution attacks others ' website to perform some operations, such consequence is our server's bandwidth will be depleted, the CPU runs full, therefore needs our space to have the use DEDECMS and so on program's best setting, prevents our server to become the broiler.

Phenomenon: the host contract (generally because of the dedecms loophole causes hackers to upload the Trojan program to send UDP attack packets, used to attack other people's website), bandwidth use more than 50m/s, by the system automatically restart or downtime.

There are several ways to prevent phpddos now.

1. Directly shut down the PHP function (this method, some PHP program can not run)
2. Direct sealing UDP, this method may manslaughter some running program
3. With the official export of the anti-DDoS, but to install the PHP outside the star
4. Use pseudo static to export the attack to other IP address (need Linux server)

Win Host Solution:

1, the main programme:

Download http://www.jb51.net/softs/246728.html extract to any directory, directly run Setup.bat can

This program can also automatically block the UDP contract program.

Check the plus or include directories that use the DEDECMS site, remove the Trojans that are left behind by hackers, and upgrade the DEDECMS to the latest version.

2. Alternative: A more thorough approach is to disable PHP's Fsockopen function, but disabling this feature may result in some Web site functions (remote read, API calls, etc.) fail.

(Edit D:\SOFT_php_PACKAGE\PHP\php.ini, modify Disable_functions =fsockopen, and then start > run iisreset to take effect.) )

3. Alternative: can also use the Web site management assistant function "killing virus" to clean up the Trojan program.

Linux Setup methods:

The following rules can be enforced directly on the server to prevent UDP packets.

Copy Code code as follows:

Iptables-f
Iptables-a output-p udp-d 61.139.2.69--dport 53-j
Iptables-a output-p udp-d 8.8.8.8--dport 53-j
Iptables-a output-p udp-j DROP
Service Iptables Save