Blocking proxy's serverwide?

hostparlor · 10-10-2007, 06:21 PM

Is there a certain way to block proxies server wide on my server? It would be greatly appreciated. Right now im being syn flooded and its blocking the syn flood but there using all proxy's sometimes they get through and raise the server load a little bit above 1.00

Camron · 10-10-2007, 07:51 PM

I had this trouble awhile back, before I had a firewall in place. I would recommend setting up a script to run on cron (run every 5 min or so) that checks to see if an IP is connected more than 100 times in the last minute - if so, block the ip using iptables (have the script do it automatically). I did this when I had the trouble and it worked.

Not always are proxies used to attack people's sites so I would recommend you avoid blocking all proxies - if even that being possible.

hostparlor · 10-10-2007, 09:54 PM

the attacks have seemed to stop. ima have to go ape crazy on someone if they start back up..HAHAHH Thank though. I will look into this.

iHubNet-Matt · 10-11-2007, 09:40 AM

I think you need to a server hardening. Have you properly configured firewall in the server?

10-10-2007, 06:21 PM	THREAD STARTER #1 (permalink)
hostparlor Account Closed Join Date: Sep 2007 Location: Ohio Posts: 87	Blocking proxy's serverwide? Is there a certain way to block proxies server wide on my server? It would be greatly appreciated. Right now im being syn flooded and its blocking the syn flood but there using all proxy's sometimes they get through and raise the server load a little bit above 1.00

10-11-2007, 09:40 AM	#4 (permalink)
iHubNet-Matt NamePros Regular Join Date: Aug 2007 Posts: 607	I think you need to a server hardening. Have you properly configured firewall in the server? __________________ iHubNet Ltd - Premium Hosting Solutions 4 ALL *â€¢ Solid Support â€¢ Solid Equipment â€¢ Solid Network* *Shared Hosting / Reseller Hosting / Managed Server* Matt T.

10-10-2007, 07:51 PM	#2 (permalink)
Camron Senior Member Join Date: Jan 2006 Location: Portland, Oregon Posts: 2,102 Follow @hostingfuze	I had this trouble awhile back, before I had a firewall in place. I would recommend setting up a script to run on cron (run every 5 min or so) that checks to see if an IP is connected more than 100 times in the last minute - if so, block the ip using iptables (have the script do it automatically). I did this when I had the trouble and it worked. Not always are proxies used to attack people's sites so I would recommend you avoid blocking all proxies - if even that being possible.

10-10-2007, 09:54 PM	THREAD STARTER #3 (permalink)
hostparlor Account Closed Join Date: Sep 2007 Location: Ohio Posts: 87	the attacks have seemed to stop. ima have to go ape crazy on someone if they start back up..HAHAHH Thank though. I will look into this.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)