Is there any way to use .htaccess to prevent DOS ?
 

Is there any way to use .htaccess to prevent DOS ?

I.e. is it possible to redirect traffic to some URL from any IP which starts sending hits for example more than one per second ?

If this is not possible, what are the best ways to fuck agaist denial of service attacks ? I'm getting mad with this shit.

However I don´t have access to routers etc. so, is there any
"easy solution" ?

Here's an anti-dos module for apache. I have no idea how well it works.

http://freshmeat.net/projects/mod_do...e/?topic_id=43

Thanks a lot!
I will try it! ...Next friday I really would like to do something else than sitting on the front of my screen...

truth is there is no way to prevent a DOS. you can mitigate the damages in many cases, but if someone is determined, they can probably find a way to take you down. ultimately if you only have a 100Mbit NIC, and they hit you with 100Mbit/s traffic, you're down.

that module won't prevent a DOS very well, and may make debugging your site a lot harder. your visitors will complain of random 403 errors and you won't necessarily know why they're getting them.

Ultimately, if you are trying to prevent or stop DOS attacks, it should be done at the router level, because there aren't many servers out there that have the HP to truly withstand a REAL DOS attack, and they'll die in the effort...

bingo. we had a mainstream (non-adult) server on a 100Mbit/s pipe ddos'd by some script kiddies last month and it took the server down in seconds. No .htaccess or server module would have helped against that. I think the sys admins did something with the router until we got in touch with telecom.