Dedicate server DoS Window ??

Asked By darenlehman 20 points N/A Posted on - 07/29/2011

Hello Greetings,

I have a dedicated server with HostGator, and run a fairly large website on it. The issue that I'm having is that little kids with a DoS programs have the ability to take down my website from one IP with 300+ connections. For some reason the firewall doesn't pick it up, and I have to enter the IP in the "/etc/firewall/IPDROP_GLOBAL" file, and reboot the firewall. After that, it takes about 3-4 minutes for the site to come back up.

Is this something that would normally happen on any host? Is there anything I can do to prevent such little attacks?

This how I find out how many connections are on my server:

 

Code:

netstat -anp |grep 'tcp|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

Server specs:

 

Code:

Intel Xeon 3110 (Dual Core)
4 GB DDR2 Memory
2 X 250 GB Hard Drive
1,500 GB Bandwidth
13 Dedicated IPs

Thanks,

• Status: Open
• Question Views: 1066
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: DOS & Windows

Answered By Drake Vivian 30 points N/A #95142

Dedicate server DoS Window ??

Hi there Darenlehman,

 

The small attacks you are dealing with are called DoS attacks. DoS stands for Denial of service, and it is basically spamming your server with plenty of connections so your server becomes unreachable. Once under the DoS attack every server will act the same, so there is no difference between your hosting and some other.

 

You should know that there is not much you can do to prevent DoS attack. You can eventually notice them on time and stop them before they kill the server and if I've noticed correctly, you are doing that the right way – by entering the IP address into the proxy configuration. Also, few minutes is decent time for the server reboot.

 

Best regards,

Drake Vivian

About Drake Vivian

Questions
0

Answers
820

Best Answers
186

• Vote Up 0 Vote Down

• Posted on - 07/07/2013
• Question Category: DOS & Windows