Hotlink Prevention Scripts
May 21, 2008if anyone knows a script that is url rewrite mods that can fix this hotlink issue by having the link url change every 20 minute.
View 2 Repliesif anyone knows a script that is url rewrite mods that can fix this hotlink issue by having the link url change every 20 minute.
View 2 RepliesI have searched for prevention methods and explanations on what DoS's and DDoS's are capable of. I was hoping someone could shed some light on free alternatives that would help reduce these attacks or help to make me aware if one were to occur.
Linux Distro: CentOS 5.3
I am not running apache or any web related services on my machine.
I run a dedicated server for the sole purpose of hosting a few game servers. I have already contacted my provider and they offered a $599 /mo plan for prevention. This is unreasonable and I simply cannot afford it. I have been threatened with a DDoS because one of my administrators banned a player constantly creating drama, stress, and breaking rules.
I simply cannot afford a gigantic bandwidth bill and this scare tactic has made me a little weary. Is there anything I can do to reduce the damage?
I would like to know what are the best ways in preventing a UDP D/DoS Attack. DDoS-Deflate and most programs like that are just for TCP connections, and most of the time only for port 80. What is the best option out there for protection (linux wise) for UDP attacks. I was using shorewall before but it did not do so well so I just switched now to CSF [url] with WebMin and seems to be working ok. Even though thoes are both firewalls, they seem to have some protection against UDP Attacks. Please note this is a server that just hosts some game servers, no webhosting. What would be my best option here?
View 3 Replies View RelatedI have linux server and like to put somekind of DDOS prevention/protection... what kind of device do I need to purcahse to do this?
can anyone advise on this?
My host has told me that my forum is coming under a DDOS attack. Once was on Friday March 20th and again today (monday march 23). Before those two, there are attacks almost every week, sometimes twice a week.
The host installed DoS-Deflate. It started blocking legitimate traffic and had to be removed.
The operating system is Linux CentOS, the forum software is VBulletin. The server is a VPS with 1 gig of memory.
Besides DoS-Deflate, what other options are out there?
any experience with the DDoS prevention feature provided by SoftLayer?
View 6 Replies View RelatedToday my server was down cause it was overloaded and when i restart my server its running how to stop such problem in the future
View 10 Replies View Relatedi am seeing a lot of Local file inclusion (LFI) and mysql injection attacks quite often directed to php scripts.
what is the way to prevent them? would installing mod_security to apache work?
I have a VPS from hostforweb.com , and my vps every week under ddos attack and 80-150 connection login to apache...
how can i prevention from ddos attack?
I use .htaccess to protect hotlinking of photos on one of my sites and it works well. I am having a problem with a myspace kid. About a year ago he tried to hotlink to a photo on my site but screwed up the html so its looking for a file that isn't there.
In the beginning I figure he would fix it, hasn't happened. I sent him a message asking him to fix it, he hasn't.
Im tired of his myspace traffic showing up in my error logs.
The file name his site is looking for is PeterForsberg.jpg%3E%3C/img%3E%3C/td%3E%3C/tr%3E%3Cscript%20language=
I dont know how to format an entry into .htaccess to get his screwed up code to display my hotlink image.
one of my clients seems to be attracting unwanted attention, it seems as if bots or something along those lines are attempting to exploit my box, while they are unsuccessful it would seem. I was wdonering if there was a rule I could put in Mod_Security that would ban them for attempting to
GET "/awstatsf/logger.php?action=log&type=Hybrid&host=hacked101&"
I recently initiated "Hot Link Prevention" on one of my web sites on my Dedicated server (via CPanel). It woks well in re-directing hotlinked images to a small image that says "Unauthorized Hotlink Image." This of course prevents other web sites from leaching my bandwidth. However, I have had a number of people complain that when they visit my forum, they don't get my site's images, but instead see the Unauthorized Hotlink Image. The common thread seems to be the people with the problem are using Security Software. In one case, a guy is using Norton Confidential. Another guy is using some Security software provided by his ISP. I'm guessing that this security software is somehow messing with the Referer in tehir browser and confusing my server into thinking the images are being hotlinked from some other site. Short of turning off Hot Link Prevention, does anyone have any suggestions to tell the folks...are there settings in their Security Software for example that will prevent the problem when they visit my site?
View 4 Replies View RelatedI have got the problem that before 3 days some body who's site traffic is very high hotlink some images from my site which cause my server memory and bandwidth using too much due to that my server not working properly and extreme slow.
I have then immediately protect the Hotlink after that my bandwidth is not using more but the images which he has hotlink their request are coming too much and continued and my server still busy on that request and due to that server memory is still using too much.
I have checked it from top command and cpanel and apache status here I have found that Nobody user are hitting too much and using my server memory on alarming stage in cpanel CPU/Memory/MySQL Usage shows nobody used +90% memory. I have also checked it on top command nobody user PID and I have match it with the apache status from cpanel then I have come to know that the request are coming from same site for hotlink images and these are using my server memory too much.
I have also block that site from htaccess but still these requesting coming continually.
Now my bandwidth is using normally but memory is still using very +80% much after doing all these action mentioned above. So, kindly tell me how can I block the requests coming from the site who hotlink images so that I can control my server memory to normal position.
Following are my top command and server information.
Intel(R) Xeon(R) CPU 1.86GHz with 1 GB Ram
WHM 11.23.2 cPanel 11.23.4
CENTOS Enterprise 5.2 i686
Server Version: Apache/2.0.63
Php 5.2
msql 4.1
top - 19:19:18 up 1 day, 4:13, 1 user, load average: 0.11, 0.33, 0.34
Tasks: 557 total, 2 running, 555 sleeping, 0 stopped, 0 zombie
Cpu(s): 4.6%us, 0.5%sy, 0.0%ni, 94.2%id, 0.7%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 1033788k total, 1010136k used, 23652k free, 17328k buffers
Swap: 2096472k total, 139776k used, 1956696k free, 276248k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2457 mysql 17 0 294m 138m 2356 S 1 13.7 59:40.07 mysqld
10772 nobody 15 0 36136 19m 3836 S 0 1.9 0:00.85 httpd
10787 nobody 15 0 36120 19m 3824 S 0 1.9 0:00.92 httpd
11346 nobody 18 0 36244 19m 3788 S 0 1.9 0:00.65 httpd ....
Is there a way to enable hotlink protection so that when I edit a page from my computer the pictures from the server display from my server but my site is still protected from other hotlinking. My intent is to make it easier for someone to edit there page.(i know I could just reupload image files but I was trying to think of a way to make it easier for someone else) I thought adding my ip address to the cpanel hotlink protection enabler would do the trick but it hasn't.
View 4 Replies View RelatedDoes anyone have experiences with using 1and1 shared servers as a hotlink host?
I see they have a $4.99 plan that includes 120GB diskspace and 1200GB bandwidth.
To rehash my other thread (http://www.webhostingtalk.com/showthread.php?t=766602), I'm looking for a separate hosting account to store/hotlink some FLV files that will be used by my client's websites on other servers.
For those of you with experience with 1and1:
How much bandwidth/diskspace did you use?
Did your account ever get suspended for resource/bandwidth usage?
If so, how much were you using of what you were supposedly promised?
What was the performance of their shared servers?
Did you ever have a problem with downloads timing-out?
Look, I'm under no illusion that any company is going to let me use $100 worth of bandwidth for only $5 a month, but I'm not looking to use the whole 1200GB.
At most, I could see myself using less than half (~500GB) of what is offered in their package.
So from those with the experience, what is the verdict on using 1and1 in this manner?
I have a plesk panel and i had a look for hotlink protection but unfortunately couldn`t find the proper option.
I guess there is a hotlink protection at windows version of plesk but not at linux one. I have a linux server.
Also i have a question about hotlinks also, one of my customer has a site that it uses too much bandwith like 600 gb at a month. It is an education related site and site is html.
And i am having some high load issues. When i check apache-status it shows %90 of the connections for that site. But i cant be sure that if it site really makes high load on server because like i told site is html. Also would like to know if server get s load for example if visitor wants to download something from site.
Because visitors are usually downloading zip, mp3 and those kind of files and i dont know if that many download cause the high load.
Also will it reduce the load of the server if i put hotlink protection to that site because of chance for other sites to leech files from this site?
Edit : If there isn`t any option for hotlink protection at Plesk panel how can i enable hotlink protection. Maybe using htaccess, but i would be glad if you can provide hotlink protection code also
Does anybody know which rules should be used to allow hotlinking of files with *_thumb* in their file name and block hotlink of all other files?
View 2 Replies View RelatedOne of the sites at my server is using over resource and causing slowdown to other sites. Because even i am still waiting for my in/out traffic graph, i guess leechers are giving link to those files from other websites and directly downloading from my server.
As a result, site is using around 1.5 tb of bandwith. It was not a big issue before but now server connection is 10 mbps, it was 100 mbps at old server.
So we have 2 options at this point, upgrading connection or activating hotlink for files.
But i donīt really know how to protect .zip and .rar files being downloaded from other sites by direct link to file. I tried hot link protection at cpanel. It is working well for image files, but when i add zip and rar files to protection list, nothing changed. I can still download the file by clicking direct link from other site.
does anyone on this forum know how to do a referral check to prevent hot linking to files that are on a nginx server? There is this regex code you use but I don't know how to put it together. how to do it on nginx using their rewrite module?
View 12 Replies View RelatedHow to hotlink images in forum?
View 2 Replies View RelatedI found someone can use the following script. But I dont know where to put those script. Is it in htaccess like apache?
$HTTP["referer"] !~ "^($|[url]
$HTTP["referer"] !~ "^($|[url]
url.redirect = (
"(/.*.(JPG|jpe?g|png|gif))$" => [url]
}
}
The proxy script I've got installed has been playing up and now it shows something like this
I was playing with some hotlink protection settings etc which I cant fix now.
Anyone know how to get this fixed?
I can run exactly the same script under a different account on the same VPS without any issues.
i tried to create .htaccess file to protect hotlinking ; it's worked perfect with Firefox but can't work with IE. Here's my .htaccess file:
Code:
RewriteEngine on
<Limit GET POST>
order deny,allow
deny from all
allow from all
</Limit>
<Limit PUT DELETE>
order deny,allow
deny from all
</Limit>
AuthName domain.com
AuthUserFile www est.htpasswd
RewriteCond %{HTTP_REFERER} !^[url] [NC]
RewriteCond %{HTTP_REFERER} !^[url] [NC]
RewriteCond %{HTTP_REFERER} !^[url] [NC]
RewriteCond %{HTTP_REFERER} !^[url] [NC]
RewriteRule .*.(jpg|jpeg|gif|png|zip)$ [url] [R,NC]
If using Firefox and download a .zip file from my site it'll work but if use Internet Explore it'll only download redirect html file instead.
I am setting up the HotLinking access in cPanel for one of my accounts and don't understand the wording of this section.
It first has the list where you put in the domains that you want to allow hotlinking for.
Then below that it has an input that says, "Extensions to allow:". For this input, does that mean extensions to allow for EVERYONE, or just the domains listed in the section above?
You think they'd be clearer on that in the documentation, but they aren't. Help on this is greatly appreciated.
Has any body had experience with the different solutions available for protection your video/audio stream hosted on windows media server. We are planning on launching Media hosting services and are currently considering Video quota to protect clients streams. If there is any other solution,
View 2 Replies View Related