Koozali.org: home of the SME Server

server being hammered

Offline Rody

  • *
  • 10
  • +0/-0
server being hammered
« on: September 20, 2009, 07:50:34 PM »
A couple of months back I posted about a supposed server instability and my server was crashing at least weekly some times more often, I upgraded my hardware and still had the same issue so i started digging in the logs. I found that a web-hosting site was hammering modules.php from one of my phpnuke sites, sometimes downloading it so many times that I was serving it more than 8 gigabytes a day. I pulled the site immediately and my server stopped crashing, imagine that. I realize that phpnuke is very unsecured so i am rebuilding with another portal site software, but is there a way to ban people that hammer sites like that?

rody

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: server being hammered
« Reply #1 on: September 20, 2009, 08:32:02 PM »
Rody

Please read the extensive documentation that is on the contribs.org website

http://wiki.contribs.org/SME_Server:Documentation:FAQ#DB_Settings
Refer this section
    * I want to block traffic from some ip-addresses to my server on some port.

config setprop httpd-e-smith DenyHosts a.b.c.d,w.x.y.z
signal-event post-upgrade
signal-event reboot

and an alternative
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Block_incoming_IP_address

Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline Rody

  • *
  • 10
  • +0/-0
Re: server being hammered
« Reply #2 on: September 20, 2009, 08:49:58 PM »
awesome

thanks
rody

Offline chris burnat

  • *****
  • 1,135
  • +2/-0
    • http://www.burnat.com
Re: server being hammered
« Reply #3 on: September 20, 2009, 11:05:56 PM »
Moving to General Discussions where it is more appropriate.
- chris
If it does not work out of the box, please fill in a Bug Report @ Bugzilla (http://bugs.contribs.org)  - check: http://wiki.contribs.org/Bugzilla_Help .  Thanks.