Denial of service DoS attacks typically flood servers and networks with high traffic in order to overwhelm the victim resources and make it difficult for legitimate users to use resources. This effectively makes it impossible to stop the attack simply by blocking a single source.
DoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It uses netstat command to track all traffic and automatically block attacker’s IP address through IP tables or APF according to the configuration.
Below are steps to install DDOS Deflate on your server :
# Login to server with root user
cd /usr/local/src/
wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh
You can change configration options by editing below file
/usr/local/ddos/ddos.conf
# Start DDOS Deflate service
/usr/local/ddos/ddos.sh -c
# Create a cronjob to run DDOS Deflate script regularly
ddos –cron
# Display whitelisted IP addresses
ddos -I | –ignore-list
# Display blocked IP addresses
ddos -b | –bans-list
# To start a daemon
ddos -d | –start
# To stop the daemon
ddos -s | –stop
# To show status of daemon
ddos -t | –status
# To display active connections
ddos -v | –view