(D)DoS Deflate Interface (DirectAdmin) extension prevents DDoS attacks by blocking the IP temporarily from which the connections exceed the configured limit. Rules are added in the selected firewall to block the IP. Currently, we support APF, CSF, FIREWALLD, and IPTABLES.
The following parameters can be configured in the Admin-ahead (D)DoS deflate interface :
Execution Frequency: Determines the frequency at which the script is executed by the cron.
Connection Limit: Sets the limit above which the IP is blocked/email is sent.
Firewall: Shows currently available firewall on the machine. Supports APF, CSF, FIREWALLD, and IPTABLES.
IP Ban Time: Sets the duration in minutes for which the IP remains blocked.
Notification Email: Email ID to which the alert is sent, when the number of connections established to the server exceeds the configured limit if the field is empty the mail feature got disabled.
Whitelisted IPs: Connections from these IPs are not blocked even if the number of connections established exceeds the configured limit. Shows the list of all the IPs that are whitelisted.
Temporarily Banned IPs: Shows the IPs that are banned temporarily for the configured time limit. From here we can remove IPs or add to the permanent list.
History page size: We can define a limit for records showing on the Ban History page.