|
安装DDoS-Deflate [root@localhost ~]# wget http://www.inetbase.com/scripts/ddos/install.sh [root@localhost ~]# chmod +x install.sh [root@localhost ~]# ./install.sh DOS-Deflate卸载 wget http://www.inetbase.com/scripts/ddos/uninstall.ddos chmod 0700 uninstall.ddos ./uninstall.ddos 配置ddos.conf [root@localhost ddos]# cat ddos.conf ##### Paths of the script and other files #配置文件也是个shell脚本 PROGDIR="/usr/local/ddos" PROG="/usr/local/ddos/ddos.sh" IGNORE_IP_LIST="/usr/local/ddos/ignore.ip.list" #存放白名单的文件 CRON="/etc/cron.d/ddos.cron" #计划任务，默认是每分钟执行一次ddos.sh APF="/etc/apf/apf" IPT="/sbin/iptables" ##### frequency in minutes for running the script ##### Caution: Every time this setting is changed, run the script with --cron ##### option so that the new frequency takes effect FREQ=1 #DDoS-Deflate通过linux的计划任务执行，默认为每分钟一次 ##### How many connections define a bad IP? Indicate that below. NO_OF_ConNECTIONS=150 #定义单个IP达到多少连接时规定为这是一次ddos攻击 ##### APF_BAN=1 (Make sure your APF version is atleast 0.96) ##### APF_BAN=0 (Uses iptables for banning ips instead of APF) APF_BAN=0 #这里为 “0”，表示使用iptables，而不是APF ##### KILL=0 (Bad IPs are'nt banned, good for interactive execution of script) ##### KILL=1 (Recommended setting) KILL=1 #是否阻止被定义为ddos攻击的ip，“1”为阻止 ##### An email is sent to the following address when an IP is banned. ##### Blank would suppress sending of mails EMAIL_TO="xxxxx@ithov.com" #事件通知人的邮件地址 ##### Number of seconds the banned ip should remain in blacklist. BAN_PERIOD=600 #阻止被定义为ddos攻击者ip与本机通信时间，默认为600秒 |
安装DDoS deflate 防止DDOS攻击
回复:0 浏览:55
- 楼主admin 圈主
- 2019-05-05 15:14