The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How can I temporarily NULL ROUTE one of my own IPs?

Discussion in 'Security' started by jols, Jun 26, 2012.

  1. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    I am getting hit by a DDOS SYN FLOOD attack on a couple of currently unused IPs that have been configured on my server.

    I just want to remove these IPs temporarily, so that no response (e.g. from Apache) is sent out to the remotely connecting IP.

    I know I can have my data center NULL ROUTE these IPs for me, but I would rather just do it myself via shell, or in WHM.

    Can this be easily accomplished?

    Yes, we have CSF and the SYNFLOOD protections switched on, but at this point I would rather just pull the IPs for a while.

    By the way, they are hitting port 443 rather than port 80 for some reason.

    Thanks for any ideas here!
     
  2. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    Nevermind, I finally found the button in the CSF configs - Deny Server IPs

    This should help.
     
  3. Eric

    Eric Administrator
    Staff Member

    Joined:
    Nov 25, 2007
    Messages:
    746
    Likes Received:
    11
    Trophy Points:
    18
    Location:
    Texas
    cPanel Access Level:
    Root Administrator
    Howdy,

    Just for someone else's sake you could just remove the IP from the server.

    Thanks!
     
Loading...

Share This Page