|
|
|
|
АРХИВ :: nginx-ru
|
Nginx-ru mailing list archive (nginx-ru@sysoev.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ddos, как боротся?
- To: nginx-ru@xxxxxxxxx
- Subject: Re: ddos, как боротся?
- From: "Alexander Sobcanyuk" <sasa@xxxxxxxxxxx>
- Date: Sat, 14 Apr 2007 16:07:36 +0400
- Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth; b=iHDBCwNMOU2Zzbzotcg5gQBWK/w/6FO+HRSxujHxiCm2SpwiwqwZefwkvnc9cp/d7snkOGM2NCJ1dhRRIQSkzy1jcmDmcx4AbSxpTAH1Kl9zHOXIpUzw/pQaRT9LzdUbpJ8uLXqJYHEc9Eh+2CAuWzVrUvG2MsFfPbR9gPj+OQw=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth; b=FhZGwq07wlGOZkssrrKxXT8hu1WD98Gj6P+C6meqfEfHaqflNHp9XxTitMn+x9f85zuVGBqzMCaV9n+krEnhg6RETqnYExjXrsMFS8q4+2zEII8vg/eWSCjrhXYKhcL3MllYNd1Io2ffWWpJeysIswZUTSDwR/MkrraU8oMvwYA=
- In-reply-to: <066a01c77e67$f587fdd0$33d8a8c0@xxxxxxxxxx>
- References: <176343364.20070414011759@xxxxxxxxxxxxx> <066a01c77e67$f587fdd0$33d8a8c0@xxxxxxxxxx>
что значит "Грепйте IP" ?
On 4/14/07, slava <slava@xxxxxxxxxxxx> wrote:
Минимизировать последствия лучше всего с помощью firewall. Грепйте IP и блокируйте в [ipfw|iptables|что-то ещё]
Ну а лучше всего конечно - выяснить причину и устранить её.
--- Вячеслав.
----- Original Message ----- From: <deniswork@xxxxxxxxxxxxx> To: <nginx-ru@xxxxxxxxx> Sent: Saturday, April 14, 2007 2:17 AM
Subject: ddos, как боротся?
Привет nginx-ru,
Очень нужен совет.
В логах вижу:
2007/04/14 01:13:16 [info] 18389#0: *892324 client 85.140.39.66 closed
keepalive connection (104: Connection reset by peer) 2007/04/14 01:13:19 [info] 18406#0: *892658 client 85.140.39.66 closed keepalive connection (104: Connection reset by peer) 2007/04/14 01:13:22 [info] 18406#0: *892970 client
85.140.39.66 closed keepalive connection (104: Connection reset by peer) 2007/04/14 01:13:22 [info] 18406#0: *893029 client 85.140.39.66 closed
keepalive connection (104: Connection reset by peer) 2007/04/14 01:13:25 [info] 18406#0: *893387 client 85.140.39.66 closed keepalive connection (104: Connection reset by peer) и много с разных IP
это ддос, тк nginx перестает отдавать файлы, и показывает 500 ошибку.
Как с этим бороться?
-- С уважением, Александр Собканюк
sasa@xxxxxxxxxxx 8 901 7820149
|
|
|