Knowledgebase
Knowledgebase
Portal Home > Knowledgebase > Articles Database > Deflate DDOS ignoring the Ignore.ip.list
Deflate DDOS ignoring the Ignore.ip.list
Posted by NickUK, 02-12-2011, 10:29 AM Hello I've been running Deflate DDOS on a few servers for ages without any issues, however I'm currently having issues with it on this Debian server. Due to recent attacks I've made the server quite a bit tighter including dropping the max connection to a very low 20 as it's currently only streaming there is no need for anyone to have anymore connections open over 1 Minute period. However, the server that pulls the data opens upwards of 50-100 and I've added this to the IPTables to no drop any packets and added this to ignore.ip.list. This doesn't work as the IPTables is showing to allow it on every IP towards the server, however Deflate DDOS just drops it straight back into IPTables to dump the packets. Any suggestions on why Deflate DDOS is ignoring the ignore.ip.list? Here is what IPTables is currently showing when the IP is banned by Deflate DDOS Srv001:/usr/local/ddos# iptables -L -n --line | grep *.*.*.* 1 DROP all -- 77.*.*.*. 0.0.0.0/0 2 ACCEPT all -- 77.*.*.*. 0.0.0.0/0 After 600 Seconds DDOS Deflate decides to unban the IP Srv001:/usr/local/ddos# iptables -L -n --line | grep 77.*.*.* 1 ACCEPT all -- 77.*.*.*. 0.0.0.0/0 I've put *s instead of the standard IP for obvious reasons. Last edited by NickUK; 02-12-2011 at 10:32 AM.
Add to Favourites 
Print this Article
Also Read
