linux/ddos-mitigator
1
0
Fork 0
Code Issues Pull requests Releases 5 Wiki Activity

Update description.

Browse source
This commit is contained in:
Manuel Friedli 2020-09-18 14:06:30 +02:00
parent f2c8ad8b9d
commit 8fa1414f18
1 changed files with 9 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
ddos-mitigator.sh
View file

@ -1,21 +1,17 @@
#!/bin/sh #!/bin/sh
################################################################################
################################################################################
########### FIXME: This text is outdated and needs to be rewritten. ###########
################################################################################
################################################################################
################################################################################ ################################################################################
# # # #
# Try and prevent apache overloads by banning IP addresses that have (too) # # Try and prevent apache overloads by banning IP addresses that have (too) #
# many open connections. # # many open connections. #
# This script uses netstat to determine the connections to the HTTPS port of # # This script uses netstat to determine the connections to a configurable port #
# the host machine and provides automated whois information retrieval based on # # on the host machine and provides automated GeoIP information retrieval based #
# the address or the /24-, /16- or /8-subnet thereof. Addresses (or subnets) # # the address or the /24-, /16- or /8-subnet thereof. A GeoIP city- or country #
# are presented to the user in order of descending connection count. For each # # database must be installed separately and is provided to the script via a #
# address (or subnet), the user can choose to ban or ignore it. Addresses (or # # command line parameter. #
# subnets) chosen to be banned will be blocked by the apache-badbots jail of # # Addresses (or subnets) are presented to the user in order of descending #
# fail2ban. # # connection count. For each address (or subnet), the user can choose to ban #
# or ignore it. Addresses (or subnets) chosen to be banned will be blocked by #
# a configurable jail of fail2ban. #
# Author: Manuel Friedli, <manuel@fritteli.ch> # # Author: Manuel Friedli, <manuel@fritteli.ch> #
# This script is licenced under the GNU General Public Licence, version 3 or # # This script is licenced under the GNU General Public Licence, version 3 or #
# later. # # later. #