Limit incoming bandwidth with CSF?

Portal Home > Knowledgebase > Articles Database > Limit incoming bandwidth with CSF?

Posted by slurpt, 10-29-2013, 11:51 AM
Hello, My server has a 100mbps port and sometimes I get DDoS attacks which most times use up the whole port. I was wondering if it is possible to drop the bandwidth if it is let's say more than 1mbps from an IP? Which CSF configuration allows to do that and do you have any other tips on mitigating DDoS attack? Thanks.
Posted by serve-you, 10-29-2013, 01:49 PM
Look into the SYNFLOOD settings in CSF. Honestly though, if you are actually getting ddos, you need to stop it before it gets to your server. The traffic still has to go through your network and down to your NIC before you can do anything about it on the server side.
Posted by Kailash12, 10-30-2013, 01:50 AM
For DDoS, you have to block the traffic before they can reach to your server (filter traffic using Hardware firewall). If you use software to block the traffic will still consume your bandwidth.
Posted by net, 10-30-2013, 02:32 AM
If you feel you are getting an attack but still can access your server, then it is not heavy and you can stop it via CSF. If it is a real ddos, then you might need to try to sign up for a remote ddos protection from cloudflare, staminus, blocklotus, etc....

Add to Favourites Print this Article