ispCP mit NGINX als Reverse-Proxy einsetzen [Schutz vor SynCookies und HttpDDoS]

Code:

[SynDDOS]

enabled  = true

filter   = AntiSynDDOS

action   = iptables-complete[name=AntiSynDDOS]

           mail-whois[name=Mein-Servername-AntiSynDDOS, dest=meine-email@adresse.de]

logpath  = /var/log/nginx/reverse.log

maxretry = 50

bantime  = 3600



[httpDDOS]

enabled  = true

filter   = AntihttpDDOS

action   = iptables-complete[name=AntihttpDDOS]

           mail-whois[name=Mein-Servername-AntihttpDDOS, dest=meine-email@adresse.de]

logpath  = /var/log/nginx/reverse.log

maxretry = 50

bantime  = 3600

Code:

[Definition]

 

# Option:  actionstart

# Notes.:  command executed once at the start of Fail2Ban.

# Values:  CMD

#

actionstart = iptables -N fail2ban-<name>

              iptables -A fail2ban-<name> -j RETURN

              iptables -I INPUT -j fail2ban-<name>

 

# Option:  actionend

# Notes.:  command executed once at the end of Fail2Ban

# Values:  CMD

#

actionstop = iptables -D INPUT -j fail2ban-<name>

             iptables -F fail2ban-<name>

             iptables -X fail2ban-<name>

 

# Option:  actioncheck

# Notes.:  command executed once before each actionban command

# Values:  CMD

#

actioncheck = iptables -n -L INPUT | grep -q fail2ban-<name>

 

# Option:  actionban

# Notes.:  command executed when banning an IP. Take care that the

#          command is executed with Fail2Ban user rights.

# Tags:    <ip>  IP address

#          <failures>  number of failures

#          <time>  unix timestamp of the ban time

# Values:  CMD

#

actionban = iptables -I fail2ban-<name> 1 -s <ip> -j DROP

 

# Option:  actionunban

# Notes.:  command executed when unbanning an IP. Take care that the

#          command is executed with Fail2Ban user rights.

# Tags:    <ip>  IP address

#          <failures>  number of failures

#          <time>  unix timestamp of the ban time

# Values:  CMD

#

actionunban = iptables -D fail2ban-<name> -s <ip> -j DROP

 

[Init]

 

# Defaut name of the chain

#

name = default

 

# Option:  port

# Notes.:  specifies port to monitor

# Values:  [ NUM | STRING ]  Default:

#

port = ssh

 

# Option:  protocol

# Notes.:  internally used by config reader for interpolations.

# Values:  [ tcp | udp | icmp | all ] Default: tcp

#

protocol = all