Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751387AbWH1GAi (ORCPT ); Mon, 28 Aug 2006 02:00:38 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751396AbWH1GAh (ORCPT ); Mon, 28 Aug 2006 02:00:37 -0400 Received: from 1wt.eu ([62.212.114.60]:30225 "EHLO 1wt.eu") by vger.kernel.org with ESMTP id S1751387AbWH1GAg (ORCPT ); Mon, 28 Aug 2006 02:00:36 -0400 Date: Mon, 28 Aug 2006 07:40:27 +0200 From: Willy Tarreau To: altendew Cc: linux-kernel@vger.kernel.org Subject: Re: [OT] Re: Server Attack Message-ID: <20060828054027.GR8776@1wt.eu> References: <6011508.post@talk.nabble.com> <20060827171125.5e1a0a60.largret@gmail.com> <6014209.post@talk.nabble.com> <6014456.post@talk.nabble.com> <20060828043951.GQ8776@1wt.eu> <6014622.post@talk.nabble.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6014622.post@talk.nabble.com> User-Agent: Mutt/1.5.11 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 906 Lines: 24 On Sun, Aug 27, 2006 at 10:05:52PM -0700, altendew wrote: > > To be quite honest in the end this will keep adding IPs. This russian guy who > is DDOS me is sending 40 requests per second. The problem is all the IPs are > different and I dont feel safe rejected all the IPs. I looked up the IPs on > an IPWhois and most of the same they are a "Autonomous System" wtf is that? > > This guy sends two different types of HTTP requests: > /signUp.php?ref=ec0lag > /signUp.php?ref=1945777 > > Hey man any help would be great. OK, I'll contact you off-list. First it's off-topic here, and second your attacker doesn't need to know the workarounds ! Cheers, Willy - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/