Vps, Cloud host, independent host UDP contract processing process _win Server

Source: Internet
Author: User
Tags vps iptables

The UDP contract is usually by the hacker through the PHP execution attacks others ' website to perform some operations, such consequence is our server's bandwidth will be depleted, the CPU runs full, therefore needs our space to have the use DEDECMS and so on program's best setting, prevents our server to become the broiler.

Phenomenon: the host contract (generally because of the dedecms loophole causes hackers to upload the Trojan program to send UDP attack packets, used to attack other people's website), bandwidth use more than 50m/s, by the system automatically restart or downtime.

There are several ways to prevent phpddos now.

1. Directly shut down the PHP function (this method, some PHP program can not run)
2. Direct sealing UDP, this method may manslaughter some running program
3. With the official export of the anti-DDoS, but to install the PHP outside the star
4. Use pseudo static to export the attack to other IP address (need Linux server)

Win Host Solution:

1, the main programme:

Download http://www.jb51.net/softs/246728.html extract to any directory, directly run Setup.bat can

This program can also automatically block the UDP contract program.

Check the plus or include directories that use the DEDECMS site, remove the Trojans that are left behind by hackers, and upgrade the DEDECMS to the latest version.

2. Alternative: A more thorough approach is to disable PHP's Fsockopen function, but disabling this feature may result in some Web site functions (remote read, API calls, etc.) fail.

(Edit D:\SOFT_php_PACKAGE\PHP\php.ini, modify Disable_functions =fsockopen, and then start > run iisreset to take effect.) )

3. Alternative: can also use the Web site management assistant function "killing virus" to clean up the Trojan program.

Linux Setup methods:

The following rules can be enforced directly on the server to prevent UDP packets.

Copy Code code as follows:

Iptables-f
Iptables-a output-p udp-d 61.139.2.69--dport 53-j
Iptables-a output-p udp-d 8.8.8.8--dport 53-j
Iptables-a output-p udp-j DROP
Service Iptables Save

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.