ddos-deflate icon indicating copy to clipboard operation
ddos-deflate copied to clipboard

Improvements

Open jgmdev opened this issue 10 years ago • 0 comments

I did the following improvements for those who still use this script to block minor attacks.

  • Moved configuration files to /etc/ddos/
  • Whitelist hostnames, via /etc/ddos/ignore.host.list.
  • The script can run as a daemon with monitoring frequency in seconds defined by DAEMON_FREQ
  • Auto-detection of available firewall for use.
  • Added support for CSF firewall.
  • Added man page.
  • Added init.d script.
  • Added systemd service support.
  • Added support for DESTDIR and a Makefile for easier packaging.
  • Added command option to list whitelisted addresses.
  • Added --view|-v option.
  • Added logging.
  • Improved installer and uninstaller.
  • Installer does not overrides configuration files.
  • New configuration option FIREWALL (see man ddos).
  • New configuration option CONN_STATES (see man ddos).
  • Check ip of local interfaces and whitelist them to prevent self bans.
  • Improved netstat command to support ipv6 (experimental, not tested).
  • Removed .cron extension of generated cron file because it seems to cause issues.
  • Removed KILL from conf (use -v|--view instead).

Here is the repo: https://github.com/jgmdev/ddos-deflate

jgmdev avatar Jan 12 '15 20:01 jgmdev