Dedicate server DoS Window ??

Asked By 20 points N/A Posted on -
qa-featured

Hello Greetings,

I have a dedicated server with HostGator, and run a fairly large website on it. The issue that I'm having is that little kids with a DoS programs have the ability to take down my website from one IP with 300+ connections. For some reason the firewall doesn't pick it up, and I have to enter the IP in the "/etc/firewall/IPDROP_GLOBAL" file, and reboot the firewall. After that, it takes about 3-4 minutes for the site to come back up.

Is this something that would normally happen on any host? Is there anything I can do to prevent such little attacks?

This how I find out how many connections are on my server:

 

Code:
netstat -anp |grep 'tcp|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

Server specs:

 

Code:
Intel Xeon 3110 (Dual Core)
4 GB DDR2 Memory
2 X 250 GB Hard Drive
1,500 GB Bandwidth
13 Dedicated IPs

Thanks,

SHARE
Answered By 30 points N/A #95142

Dedicate server DoS Window ??

qa-featured

Hi there Darenlehman,

 
The small attacks you are dealing with are called DoS attacks. DoS stands for Denial of service, and it is basically spamming your server with plenty of connections so your server becomes unreachable. Once under the DoS attack every server will act the same, so there is no difference between your hosting and some other.
 
You should know that there is not much you can do to prevent DoS attack. You can eventually notice them on time and stop them before they kill the server and if I've noticed correctly, you are doing that the right way – by entering the IP address into the proxy configuration. Also, few minutes is decent time for the server reboot.
 
Best regards,
Drake Vivian

Related Questions