From 8fa1414f18b8a133bb7e457b59c7eb6564a8fef8 Mon Sep 17 00:00:00 2001 From: Manuel Friedli Date: Fri, 18 Sep 2020 14:06:30 +0200 Subject: [PATCH] Update description. --- ddos-mitigator.sh | 22 +++++++++------------- 1 file changed, 9 insertions(+), 13 deletions(-) diff --git a/ddos-mitigator.sh b/ddos-mitigator.sh index 3fd4d60..5d5153f 100755 --- a/ddos-mitigator.sh +++ b/ddos-mitigator.sh @@ -1,21 +1,17 @@ #!/bin/sh -################################################################################ -################################################################################ -########### FIXME: This text is outdated and needs to be rewritten. ########### -################################################################################ -################################################################################ - ################################################################################ # # # Try and prevent apache overloads by banning IP addresses that have (too) # # many open connections. # -# This script uses netstat to determine the connections to the HTTPS port of # -# the host machine and provides automated whois information retrieval based on # -# the address or the /24-, /16- or /8-subnet thereof. Addresses (or subnets) # -# are presented to the user in order of descending connection count. For each # -# address (or subnet), the user can choose to ban or ignore it. Addresses (or # -# subnets) chosen to be banned will be blocked by the apache-badbots jail of # -# fail2ban. # +# This script uses netstat to determine the connections to a configurable port # +# on the host machine and provides automated GeoIP information retrieval based # +# the address or the /24-, /16- or /8-subnet thereof. A GeoIP city- or country # +# database must be installed separately and is provided to the script via a # +# command line parameter. # +# Addresses (or subnets) are presented to the user in order of descending # +# connection count. For each address (or subnet), the user can choose to ban # +# or ignore it. Addresses (or subnets) chosen to be banned will be blocked by # +# a configurable jail of fail2ban. # # Author: Manuel Friedli, # # This script is licenced under the GNU General Public Licence, version 3 or # # later. #