DoS-Deflate是一款免費的用來防禦和減輕DDoS***。它通過netstat監測跟蹤創建大量網絡連接的IP地址,在檢測到某個結點超過預設的限制時,該程序會通過APF或IPTABLES禁止
或阻擋這些IP.
DDoS-Deflate安裝及配置
1、安裝
wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh
2、配置
配置文件是 /usr/local/ddos/ddos.conf ,默認有如下配置
FREQ=1
NO_OF_CONNECTIONS=150
APF_BAN=1
KILL=1
EMAIL_TO=”root”
BAN_PERIOD=600
IP地址白名單:/usr/local/ddos/ignore.ip.list
3.卸載
wget http://www.inetbase.com/scripts/ddos/uninstall.ddos
chmod 0700 uninstall.ddos
./uninstall.ddos
完成!
原文地址:http://www.yuloo.com/news/1010/493646.html