DDOS Shells!!

[Ditz]

I own a dedicated server with cpanel installed, i get some users putting DDOSing shells which sends ALOT of packets out and slows (somtimes crashes my server) for hours..

I know its outgoing packets becuase i check it with iptraf.

Thanks for anyone who trys to help!

[Spiral]

Have you disabled scripts making outbound connections?

If the scripts are targeting a specific port, you can also block that port outbound from your server as well in your firewall configuration or iptables

If you got specific script names, you can set those up to be auto killled.

Anyway, there is a whole lot you can do there to stop all that.

[Ditz]

Have you disabled scripts making outbound connections?

If the scripts are targeting a specific port, you can also block that port outbound from your server as well in your firewall configuration or iptables

If you got specific script names, you can set those up to be auto killled.

Anyway, there is a whole lot you can do there to stop all that.

Have you disabled scripts making outbound connections?

How do i do this?

[Spiral]

Firewall .... limit your outbound ports if not needed or where you notice specific questionable network activity.

PHP .... turn off "allow_url_fopen" and "allow_url_include" and disable socket, curl, soap and other network related functions in PHP.INI

Disable perl access (preferred) or limit to pre-approved scripts