Im under a DDOS attack that target http server, i try iptables and other measures but nothing seems to work. Here is part of access_log: 109.237.214.239 - - [29/Aug/2021:17:39:37 +0000] "GET /foro?s33817297772r250884742883f92322299438598195591257069r HTTP/1.1" 301 295 "https://www.google.al/search?q=www.atlantis-ro.com/foro" "Mozilla/5.0 (compatible; MSIE 63.0;…
I have a webserver running running with Apache on Ubuntu behind Cloudflare. I want to block a user using the iptables of the webserver. Here I want to implement to string match feature of iptables and drop the connection. Here…
I have a Docker container on port 8081 running on Centos7, and a reverse proxy with Nginx. My domain have a LetsEncrypt SSl installed and it works good when i access "https://my.example.com", it redirects me to my 8081 Docker. But…
I hope someone here can help me out with this as it's probably a really easy setup. I am on centos 8 -- disabled firewalld and installed iptables-services. I have one physical interface with a bridge to a a few…
I have a server (VPS) with the following services: email server (postfix/dovecot) dns server (bind9) http server (nginx) Fail2ban creates a lot of entries in iptables and this causes the server to become very slow and even sometimes it becomes…
I have setup an environment in Jelastic including a load balancer (tested both Apache and Nginx with same results), with public IP and an application server running Univention UCS DC Master docker image (I have also tried a simple Ubuntu…
I have set up a kubernetes cluster based on three VMs Centos 8 and I deployed a pod with nginx. IP addresses of the VMs: kubemaster 192.168.56.20 kubenode1 192.168.56.21 kubenode2 192.168.56.22 On each VM the interfaces and routes are defined…
I'm trying trying to redirect a tcp connection to a transparent proxy without iptables. iptables is definitely not an option. Is it possible set original destination on a socket? Here is the code I wrote in go: package main import…
Recently, my manager installed fail2ban on our ubuntu 10.04 email server to ban ip addresses that failed to authenticate to our email server. As we monitor the system, we don't see the IPs that continually try to authenticate on our…
I have a LXC container apache2 installation (container listening on 192.168.122.179:80). The host is 10.138.141.216. If I tunnel via ssh: ssh -L 45678:192.168.122.179:80 [email protected] from my pc I get the apache2 page (browser to http://localhost:45678) BUT if I disconnect the…