DDoS deflate是一款免費的用來防御和減輕DDoS攻擊的腳本察蹲。它通過netstat監(jiān)測跟蹤創(chuàng)建大量網(wǎng)絡(luò)連接的IP地址酿雪，在檢測到某個結(jié)點超過預(yù)設(shè)的限 制時顾复，該程序會通過APF或IPTABLES禁止或阻擋這些IP.
官網(wǎng)：http://deflate.medialayer.com/
1奏瞬、安裝DDoS deflate
shell>wget http://www.inetbase.com/scripts/ddos/install.sh?
shell>chmod 0700 install.sh
shell>./install.sh
2枫绅、配置DDoS deflate
DDoS deflate的默認(rèn)配置位于/usr/local/ddos/ddos.conf ，內(nèi)容如下：
##### Paths of the script and other files
PROGDIR="/usr/local/ddos"
PROG="/usr/local/ddos/ddos.sh"
IGNORE_IP_LIST="/usr/local/ddos/ignore.ip.list"? //IP地址白名單
CRON="/etc/cron.d/ddos.cron"??? //定時執(zhí)行程序
APF="/etc/apf/apf"
IPT="/sbin/iptables"
##### frequency in minutes for running the script
##### Caution: Every time this setting is changed, run the script with --cron
#####????????? option so that the new frequency takes effect
FREQ=1?? //檢查時間間隔硼端，默認(rèn)1分鐘
##### How many connections define a bad IP? Indicate that below.
NO_OF_CONNECTIONS=150???? //最大連接數(shù)撑瞧，超過這個數(shù)IP就會被屏蔽，一般默認(rèn)即可
##### APF_BAN=1 (Make sure your APF version is atleast 0.96)
##### APF_BAN=0 (Uses iptables for banning ips instead of APF)
APF_BAN=1??????? //使用APF還是iptables显蝌。推薦使用iptables,將APF_BAN的值改為0即可。
##### KILL=0 (Bad IPs are'nt banned, good for interactive execution of script)
##### KILL=1 (Recommended setting)
KILL=1?? //是否屏蔽IP订咸，默認(rèn)即可
##### An email is sent to the following address when an IP is banned.
##### Blank would suppress sending of mails
EMAIL_TO="root"?? //當(dāng)IP被屏蔽時給指定郵箱發(fā)送郵件曼尊，推薦使用，換成自己的郵箱即可
##### Number of seconds the banned ip should remain in blacklist.
BAN_PERIOD=600??? //禁用IP時間脏嚷，默認(rèn)600秒骆撇，可根據(jù)情況調(diào)整
3、卸載DDoS deflate
shell>wget http://www.inetbase.com/scripts/ddos/uninstall.ddos
shell>chmod 0700 uninstall.ddos
shell>./uninstall.ddos
4父叙、白名單設(shè)置
有時候默認(rèn)的白名單經(jīng)常有失誤神郊，為了避免這個情況，我們可以手工設(shè)置白名單的ip趾唱，然后強(qiáng)制不允許修改
vi /usr/local/ddos/ignore.ip.list //手工設(shè)置白名單IP
chattr +i /usr/local/ddos/ignore.ip.list? //強(qiáng)制不允許修改
chattr -i /usr/local/ddos/ignore.ip.list? //解除不允許修改
轉(zhuǎn)載于:https://www.cnblogs.com/nicholas_f/archive/2012/01/18/2325677.html
? ? 有服務(wù)器需求請加QQ1911624872咨詢
