Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

How can I temporarily NULL ROUTE one of my own IPs?

Discussion in 'Security' started by jols, Jun 26, 2012.

  1. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    168
    I am getting hit by a DDOS SYN FLOOD attack on a couple of currently unused IPs that have been configured on my server.

    I just want to remove these IPs temporarily, so that no response (e.g. from Apache) is sent out to the remotely connecting IP.

    I know I can have my data center NULL ROUTE these IPs for me, but I would rather just do it myself via shell, or in WHM.

    Can this be easily accomplished?

    Yes, we have CSF and the SYNFLOOD protections switched on, but at this point I would rather just pull the IPs for a while.

    By the way, they are hitting port 443 rather than port 80 for some reason.

    Thanks for any ideas here!
     
  2. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    168
    Nevermind, I finally found the button in the CSF configs - Deny Server IPs

    This should help.
     
  3. Eric

    Eric Administrator
    Staff Member

    Joined:
    Nov 25, 2007
    Messages:
    751
    Likes Received:
    11
    Trophy Points:
    143
    Location:
    Texas
    cPanel Access Level:
    Root Administrator
    Howdy,

    Just for someone else's sake you could just remove the IP from the server.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice