Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: Rody on September 20, 2009, 07:50:34 PM

Title: server being hammered
Post by: Rody on September 20, 2009, 07:50:34 PM

A couple of months back I posted about a supposed server instability and my server was crashing at least weekly some times more often, I upgraded my hardware and still had the same issue so i started digging in the logs. I found that a web-hosting site was hammering modules.php from one of my phpnuke sites, sometimes downloading it so many times that I was serving it more than 8 gigabytes a day. I pulled the site immediately and my server stopped crashing, imagine that. I realize that phpnuke is very unsecured so i am rebuilding with another portal site software, but is there a way to ban people that hammer sites like that?

rody

Title: Re: server being hammered
Post by: janet on September 20, 2009, 08:32:02 PM

Rody

Please read the extensive documentation that is on the contribs.org website

http://wiki.contribs.org/SME_Server:Documentation:FAQ#DB_Settings
Refer this section
    * I want to block traffic from some ip-addresses to my server on some port.

config setprop httpd-e-smith DenyHosts a.b.c.d,w.x.y.z
signal-event post-upgrade
signal-event reboot

and an alternative
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Block_incoming_IP_address

Title: Re: server being hammered
Post by: Rody on September 20, 2009, 08:49:58 PM

awesome

thanks
rody

Title: Re: server being hammered
Post by: chris burnat on September 20, 2009, 11:05:56 PM

Moving to General Discussions where it is more appropriate.