Support

aysima · #1 07-06-2008, 03:21 PM

How can I stop this atack from LiteSpeed ?

217.174.103.221 - - [07/Jul/2008:01:16:09 +0300] "GET / HTTP/1.1" 200 6168 "-" "AventGrup"
69.65.103.14 - - [07/Jul/2008:01:16:09 +0300] "GET / HTTP/1.1" 200 6168 "-" "AventGrup"
69.65.103.14 - - [07/Jul/2008:01:16:09 +0300] "GET / HTTP/1.1" 200 0 "-" "AventGrup"
217.174.103.221 - - [07/Jul/2008:01:16:09 +0300] "GET / HTTP/1.1" 200 6168 "-" "AventGrup

mistwang · #2 07-06-2008, 06:56 PM

http://www.litespeedtech.com/support...0989#post10989

brrr · #3 07-06-2008, 07:05 PM

A user agent block will help for sure.

But since that tool - aka AntiRUS - is a DOS attack tool, you might also like to check out:

http://www.litespeedtech.com/how-tos.html#qa_dos

on how to tune LSWS to better survive a DDOS.

There are lots of posts on this forum about DOS mitigation. A search would pull up most of them.