Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!news.wtal.de!news.tal.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "Mel Smith" <med_cutout_syntel@aol.com>
Newsgroups: comp.lang.javascript
Subject: Re: Thwarting DoS attacks
Date: Wed, 3 Oct 2012 18:28:46 -0600
Lines: 54
Message-ID: <ad43i4Frej3U1@mid.individual.net>
References: <ad34l0Fka06U1@mid.individual.net> <k4ifhf$qjk$1@news.albasani.net>
X-Trace: individual.net phnTWFDUti7zXeEKzd3YYA8H0dEuT4KO6OcBR08BUbI17EWtnH
Cancel-Lock: sha1:80gO1NTCnhVwcfnwy/GmQ7TbAR8=
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
X-RFC2646: Format=Flowed; Original
Xref: csiph.com comp.lang.javascript:16374

Stefan said:

"Stefan Weiss" <krewecherl@gmail.com> wrote in message 
news:k4ifhf$qjk$1@news.albasani.net...
> On 2012-10-03 17:41, Mel Smith wrote:
>>    For the past many months I have been undergoing DoS attacks whereby a
>> person(s)
>> bypasses the 'manual' way of 'clicking' and downloading, and instead,
>> automates this
>> process with a program to begin many downloads simultaneously to attempt 
>> to
>> 'drown'
>> my home office server (Apache 2.2.22). These downloads are aborted part 
>> way
>> thru and
>> more downloads are started up.
>
> Since you asked in comp.lang.javascript: the most relevant topical
> suggestion has already been made - captchas or similar human-agent
> checks. That should be enough to fend off casual griefers, as long as
> there's no fixed URL for the download.
>
> If your attacker is serious enough, and has more resources that the
> usual script kiddies, your only hope is to fight this on the server
> side. You can either add more resources than he can swamp (more
> bandwidth, more servers, maybe a CDN), but that can quickly get very
> expensive. Or you could try to automatically ban misbehaving users:
> http://www.fail2ban.org/
>
> The simplest and easiest solution would be to let a big site host the
> download. This shouldn't be a problem in your case, because Harbour is
> free/open-source. For example, harbour-project.org is a SourceForge
> site, and all of their downloads are also hosted by SourceForge. DoSing
> SF is still possible, but probably out of reach for somebody with a
> personal grudge.
>
> - stefan

Stefan:

    I just want to identify and stop him.

    and I've been hosting my own site in my own office for three years now. 
I have no intention of changingh this mode of operation.

    I'll be looking at the 'captcha' and email approaches over the coming 
days

    btw,  each of my downloads is approx 14-15 megabytes, and comprise the 
harbour language built for about 7 different C compilers.

-Mel