Linux Mass flood attack on server

[nemezis]

)

 

[Tuchol]

config.lua

	-- Banishments
	autoBanishUnknownBytes = true

 

[nemezis]

Not working

 

[Cykotitan]

Edit the sources to make it show the IPs, and then firewall them.

 

[DonHagman]

config.lua

	-- Banishments
	autoBanishUnknownBytes = true

When I'm using that, you get bannished if you report any bad name.. (Namereport)

 

[LucasFerraz]

Hello.
Today i was attack on my server

[23:52:04.534] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:04.578] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:04.581] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:04.637] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.125] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.374] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.420] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.691] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.794] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.799] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.806] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.884] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.908] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:05.965] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:06.080] [Warning - Protocol::RSA_decrypt] Not valid packet size
[23:52:06.083] [Warning - Protocol::RSA_decrypt] Not valid packet size

Maybe someone know how fix it? ;d

Edit the sources to make it show the IPs, and then firewall them.

How can we do that? What we must change and where?

 

[Natan Beckman]

These commands use to get iptables rules to your.
With These commands EVERY ip Can Only send 20 packages for you.

iptables -N conn-flood

iptables -I INPUT 1 -p tcp --syn -j conn-flood

iptables -A conn-flood -m limit --limit 7/s --limit-burst 20 -j RETURN

iptables -A conn-flood -j DROP

iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j ACCEPT

iptables -A INPUT -p icmp -j DROP

when you restart machine you have that execute the comands again.