Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 3644 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

to many requests from one IP

Danik
Hello everyone

Can someone help me to configure my astaro so my websites can be protected?

The problem is that someone from internet send to many connection requests to my website (from the same IP) and noboby can open my website because of that.

Is there an option to set the request limit per second ?

This is the WAF log: 2011:10:13-18:48:51 Router reverseproxy: srcip="92.115.253.71" localip="myip" size="0" user="-" host="92.115.253.71" method="-" statuscode="408" reason="-" extra="-" time="11" url="-" server="mywebsite" referer="-" cookie="-" set-cookie="-"

Thankyou

sorry for my bad english


This thread was automatically locked due to age.
Parents
  • 0
    You can select 'Block clients with bad reputation' in the 'Firewall Profile' used for your server.  Depending on your situation, you might try lowering the threshhold for 'TCP SYN Flood Protection' on the 'Anti-DoS Flooding' tab of Intrusion Prevention.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    You can select 'Block clients with bad reputation' in the 'Firewall Profile' used for your server.  Depending on your situation, you might try lowering the threshhold for 'TCP SYN Flood Protection' on the 'Anti-DoS Flooding' tab of Intrusion Prevention.

    Cheers - Bob


    The bad reputation is enabled, about SYN Flood i tryed 1/20/50/100 packets per second and it didn't help me [:(]

    PS: to moderators, please move this topic to : Web Application Security folder
Reply
  • 0 in reply to BAlfson
    You can select 'Block clients with bad reputation' in the 'Firewall Profile' used for your server.  Depending on your situation, you might try lowering the threshhold for 'TCP SYN Flood Protection' on the 'Anti-DoS Flooding' tab of Intrusion Prevention.

    Cheers - Bob


    The bad reputation is enabled, about SYN Flood i tryed 1/20/50/100 packets per second and it didn't help me [:(]

    PS: to moderators, please move this topic to : Web Application Security folder
Children
No Data
Unfiltered HTML