port flood

Discussion in 'Site & Server Administration' started by ronskit, Nov 23, 2009.

  1. #1
    guys, im running red5 server and it use port 1935 which is being flooded by tcp connections and red5 service is going down as well. i need some tips/assistance to stop portflood.

    im using CSF on my linux cPanel server.
     
    ronskit, Nov 23, 2009 IP
  2. Vinsar

    Vinsar Active Member

    Messages:
    100
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    53
    #2
    You can enable SYN Flood Protection within CSF configuration.
     
    Vinsar, Nov 24, 2009 IP
  3. kbduvall

    kbduvall Peon

    Messages:
    71
    Likes Received:
    3
    Best Answers:
    4
    Trophy Points:
    0
    #3
    CSF won't do anything if the attack is coming from a botnet, which it likely is.

    Since you don't have a hardware firewall, the only thing you can do right now is close that port until the attack stops. The services on that port may not work while you have the port closed, but at least the rest of the server will work.
     
    kbduvall, Nov 27, 2009 IP
  4. SecureCP

    SecureCP Guest

    Messages:
    226
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #4
    csf has portflood protection as well.
    # Port Flood Protection. This option configures iptables to offer protection
    # from DOS attacks against specific ports. This option limits the number of
    # connections per time interval that new connections can be made to specific
    # ports
    #
    # This feature does not work on servers that do not have the iptables module
    # ipt_recent loaded. Typically, this will be with MONOLITHIC kernels. VPS
    # server admins should check with their VPS host provider that the iptables
    # module is included
    #
    # For further information and syntax refer to the Port Flood section of the csf
    # readme.txt
    #
    # Note: Run /etc/csf/csftest.pl to check whether this option will function on
    # this server
    PORTFLOOD = ""
     
    SecureCP, Nov 27, 2009 IP
  5. ronskit

    ronskit Greenhorn

    Messages:
    123
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    16
    #5
    thanks to all. csf portflood settings helped me a lot.
     
    ronskit, Nov 28, 2009 IP