Knowledgebase
under attack just help
Posted by maxi1, 04-01-2009, 12:18 PM | hello
plz i wanna ask . coz i,m under attack i got in csf today this
77.195.42.235 # lfd: (PERMBLOCK) 77.195.42.235 has had more than 4 temp blocks in the last 86400 secs - Wed Apr 1 09:39:35 2009
151.60.86.210 # lfd: (PERMBLOCK) 151.60.86.210 has had more than 4 temp blocks in the last 86400 secs - Wed Apr 1 09:39:51 2009
and these two ips was attack me them down site for 2 minutes but then block in csf
so i just wanna ask now this option in CSF
LF_PERMBLOCK : 1
i make it open 1 so this the reason can block the ips attack. or this the reason make them can attack ?
so i should keep this option 1 or make it 0 to stop this kind of ddos attacking ?
thx
|
Posted by eth00, 04-01-2009, 12:24 PM | What is it blocking them FOR? It may just be a simple scanning attack and not some large scale attack on your site.
Basically just keep in mind if you do the perm block it won't remove them, so if clients are accidentally banned you would have to remove them.
|
Posted by maxi1, 04-01-2009, 12:36 PM | block them for attacking bro and i sure wanna them keep under block coz they attack my site
but my question now to avoid any new attack same this
i have in CSF firewall config i make LF_PERMBLOCK : 1
so i should keep it 1 or change it to 0 ?
coz i donot know 1 this which is blocked them or this which open this exploit they use to attack me
hope u get me and can help
|
Posted by eth00, 04-01-2009, 12:38 PM | Sounds like you want to, so yes keep it.
You also could search the logs to figure out why it thought they were attacking.
|
Posted by maxi1, 04-01-2009, 12:44 PM | so u have anyway to stop this kind of attack bro without downing any time ?
|
Posted by eth00, 04-01-2009, 12:45 PM | Well you have not really said what type of attack it is, I have no idea what is going on to be able to help stop it.
|
Posted by wu1yi2wen3, 04-02-2009, 10:49 AM | you should give more detail about the attack.
|
|
Add to Favourites
Print this Article |
Also Read