Is there any way to use .htaccess to prevent DOS ? - GoFuckYourself.com

brutus · 11-01-2002, 10:46 AM

Is there any way to use .htaccess to prevent DOS ?

I.e. is it possible to redirect traffic to some URL from any IP which starts sending hits for example more than one per second ?

If this is not possible, what are the best ways to fuck agaist denial of service attacks ? I'm getting mad with this shit.

However I don´t have access to routers etc. so, is there any
"easy solution" ?

NetRodent · 11-01-2002, 10:53 AM

Here's an anti-dos module for apache. I have no idea how well it works.

http://freshmeat.net/projects/mod_do...e/?topic_id=43

brutus · 11-01-2002, 10:57 AM

Thanks a lot!
I will try it! ...Next friday I really would like to do something else than sitting on the front of my screen...

salsbury · 11-01-2002, 12:14 PM

truth is there is no way to prevent a DOS. you can mitigate the damages in many cases, but if someone is determined, they can probably find a way to take you down. ultimately if you only have a 100Mbit NIC, and they hit you with 100Mbit/s traffic, you're down.

that module won't prevent a DOS very well, and may make debugging your site a lot harder. your visitors will complain of random 403 errors and you won't necessarily know why they're getting them.

LBBV · 11-01-2002, 01:19 PM

Ultimately, if you are trying to prevent or stop DOS attacks, it should be done at the router level, because there aren't many servers out there that have the HP to truly withstand a REAL DOS attack, and they'll die in the effort...

spanky · 11-01-2002, 02:06 PM

Quote:

Originally posted by salsbury
ultimately if you only have a 100Mbit NIC, and they hit you with 100Mbit/s traffic, you're down.

bingo. we had a mainstream (non-adult) server on a 100Mbit/s pipe ddos'd by some script kiddies last month and it took the server down in seconds. No .htaccess or server module would have helped against that. I think the sys admins did something with the router until we got in touch with telecom.

11-01-2002, 10:46 AM	#1
brutus Confirmed User Join Date: Mar 2002 Location: Living in the bottle. Posts: 590	Is there any way to use .htaccess to prevent DOS ? Is there any way to use .htaccess to prevent DOS ? I.e. is it possible to redirect traffic to some URL from any IP which starts sending hits for example more than one per second ? If this is not possible, what are the best ways to fuck agaist denial of service attacks ? I'm getting mad with this shit. However I don´t have access to routers etc. so, is there any "easy solution" ?

11-01-2002, 10:53 AM	#2
NetRodent Confirmed User Join Date: Jan 2002 Location: In the walls of your house. Posts: 3,985	Here's an anti-dos module for apache. I have no idea how well it works. http://freshmeat.net/projects/mod_do...e/?topic_id=43 __________________ "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats." --H.L. Mencken

11-01-2002, 12:14 PM	#4
salsbury Confirmed User Join Date: Feb 2002 Location: Seattle Posts: 1,070	truth is there is no way to prevent a DOS. you can mitigate the damages in many cases, but if someone is determined, they can probably find a way to take you down. ultimately if you only have a 100Mbit NIC, and they hit you with 100Mbit/s traffic, you're down. that module won't prevent a DOS very well, and may make debugging your site a lot harder. your visitors will complain of random 403 errors and you won't necessarily know why they're getting them. __________________

11-01-2002, 01:19 PM	#5
LBBV Confirmed User Join Date: Aug 2002 Location: Atlanta Posts: 936	Ultimately, if you are trying to prevent or stop DOS attacks, it should be done at the router level, because there aren't many servers out there that have the HP to truly withstand a REAL DOS attack, and they'll die in the effort... __________________ National Net Hosting. Handled. See our new line of inexpensive Dedicated Servers \| Cabinets starting at $795 \| CDN [email protected] \| 888-4-NATNET \| www.nationalnet.com

11-01-2002, 10:57 AM	#3
brutus Confirmed User Join Date: Mar 2002 Location: Living in the bottle. Posts: 590	Thanks a lot! I will try it! ...Next friday I really would like to do something else than sitting on the front of my screen...