Syn Flood against Torrent Portals

Well ,
we have been attacked too , Sunday , and Monday .
If you are managing a server Apache 2 or similar do like this :

root@mir23:~# netstat |grep SYN_RECV

marway.org:www x.x.x.x:56995 SYN_RECV
marway.org:www x.x.x.x:4756 SYN_RECV
marway.org:www x.x.x.x:8921 SYN_RECV

etc.

then assuming you have iptables installed beat down the following syntax :

root@mir23:~# /sbin/iptables -A INPUT -s “x.x.x.x” -j DROP

or

root@mir23:~# iptables -A INPUT -s “x.x.x.x” -j DROP

Where obviously x.x.x.x are or is the IP of the syn flooder .

In some hour we shall post others optimized settings
helpful to mitigate the flood .

Good luck .

Advertisements
This entry was posted in Uncategorized and tagged , , , , , . Bookmark the permalink.