Apache DOS

nima0102 · 07-11-2009, 04:41 PM

hi
to prevent DOS on Apache what solution do you suggest ??
thanks for any help or guidance

watcher69b · 07-11-2009, 08:00 PM

in the config you can define the max connections.
apache will just ignore requests over the connection limit

anomie · 07-14-2009, 06:04 PM

To be fair, that would represent a DoS situation. If one or more attackers used up max MaxConnections, then legitimate users would be unable to access the httpd service.

@nima0102: DoS attacks by a lone wolf can (normally) be handled pretty easily. DDoS attacks can be difficult to stop. What is your situation, exactly?

viGeek · 07-14-2009, 09:00 PM

Make the following modifications to /etc/sysctl.conf

net.ipv4.tcp_synack_retries = 5
net.ipv4.tcp_syn_retries = 5

afterwords sysctl -p