Sponsored Content
The Lounge What is on Your Mind? Denial Of Service Attack Update Post 303036021 by Neo on Wednesday 12th of June 2019 04:48:43 PM
Old 06-12-2019
Denial Of Service Attack Update

Dear All,

We were hit with a denial of service (DOS) attack today beginning around June 12th 2019 @ 01:27:51 PM from an IP address registered to "RACKWEB-NET" in Bulgaria.

I was notified about this around June 12th 2019 @ 03:05 PM and did some log file analysis and discovered how the attack was happening and wrote some code to mitigate against the attack.

I think the site was down for about 1 hour and 19 minutes because of the attack.

The code I wrote will filter against these kinds of DOS attacks in the future.

Thank you for your support,

Neo

EDIT: In addition to the PHP changes, I made some changes to the DB configuration as well to help insure this kind of attack cannot succeed in the future.
These 9 Users Gave Thanks to Neo For This Post:
 
YAZ_ES(3)								 1								 YAZ_ES(3)

yaz_es - Prepares for an Extended Service Request

SYNOPSIS
void yaz_es (resource $id, string $type, array $args) DESCRIPTION
This function prepares for an Extended Service Request. Extended Services is family of various Z39.50 facilities, such as Record Update, Item Order, Database administration etc. Note Many Z39.50 Servers do not support Extended Services. The yaz_es(3) creates an Extended Service Request packages and puts it into a queue of operations. Use yaz_wait(3) to send the request(s) to the server. After completion of yaz_wait(3) the result of the Extended Service operation should be expected with a call to yaz_es_result(3). PARAMETERS
o $id - The connection resource returned by yaz_connect(3). o $type - A string which represents the type of the Extended Service: itemorder (Item Order), create (Create Database), drop (Drop Data- base), commit (Commit Operation), update (Update Record), xmlupdate (XML Update). Each type is specified in the following section. o $args - An array with extended service options plus package specific options. The options are identical to those offered in the C API of ZOOM C. Refer to the ZOOM Extended Services. RETURN VALUES
No value is returned. EXAMPLES
Example #1 Record Update <?php $con = yaz_connect("myhost/database"); $args = array ( "record" => "<gils><title>some title</title></gils>", "syntax" => "xml", "action" => "specialUpdate" ); yaz_es($con, "update", $args); yaz_wait(); $result = yaz_es_result($id); ?> SEE ALSO
yaz_es_result(3). PHP Documentation Group YAZ_ES(3)
All times are GMT -4. The time now is 06:31 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy