Gossamer Forum
Home : Products : Gossamer Forum : Discussion :

How to prevent flood attacks?

Quote Reply
How to prevent flood attacks?
Someone's been attacking the forum with what I imagine is a bot that sends multiple requests for pages as a guest user. As hundreds of guests view a page it slows and crashes the server. I can ban the ip (it's usually the same one making all the requests) but of course I'm not always around to do that.

Is it possible to set up some kind of script that will block multiple accesses? I already have a firewall, but this won't do against this type of attack. I wondered if I could limit the number of page requests for a given IP over a given period of time? It would have to be balanced not to reject genuine users, but these kinds of floods would be obvious to detect with the right script?

If so how would this script integrate with gforum? Are there scripts already available for linux? Could one be written and offered as a plugin?

Jason
Quote Reply
Re: [wickedmoon] How to prevent flood attacks? In reply to
Apache::SpeedLimit may be a possible solution.