Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #16361

Re: Thwarting DoS attacks

Show all headers | View raw

On 10/3/12 8:41 AM, Mel Smith wrote:
>     However, my 'attacker' has again outsmarted me, and uses source
> investigation techniques
> to determine the actual download sub-dir.
>
>     Examining my Apache logs I see the vast stream of aborted downloads
> resulting in
> '206' errors
206 is not an error, nor is it an aborted download.
<http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.2.7>

This may not be a DoS, but instead someone might be using a 
"download-accelerator", which may be attempting to fetch several parts 
of the file in parallel, in an attempt to speed up the download.

You might look at the User-Agent, to see if it is indeed a accelerator. 
  If it is, then I wouldn't do anything about it.

Another thing you can try is to find a way to "throttle" downloads by 
IP. Until the supposed attacker starts doing DDoS, you'll save your 
bandwidth.

Or, perhaps you need a real hosting solution since you're serving up 
apparently large files.

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 09:41 -0600
  Re: Thwarting DoS attacks Dr.Kral@nyc.rr.com - 2012-10-03 14:29 -0400
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 14:39 -0600
  Re: Thwarting DoS attacks Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2012-10-03 14:49 -0700
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:15 -0600
      Re: Thwarting DoS attacks Gene Wirchenko <genew@ocis.net> - 2012-10-03 17:26 -0700
  Re: Thwarting DoS attacks Denis McMahon <denismfmcmahon@gmail.com> - 2012-10-03 22:13 +0000
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:20 -0600
  Re: Thwarting DoS attacks dann90038@gmail.com - 2012-10-03 15:45 -0700
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:24 -0600
  Re: Thwarting DoS attacks Stefan Weiss <krewecherl@gmail.com> - 2012-10-04 00:51 +0200
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:28 -0600

csiph-web