Advise what firewall to put on the server, the server hangs a few sites with poor access and asterisk, everything worked 4 years, and recently the server crashed, the host has disabled it for the excess load. I think someone is breaking the server, I advise a simple solution as I am not a very advanced user in Linux.
For the beginning to correctly configure IPTABLES and block access for incoming connections.
sibyl_Pur answered on July 8th 19 at 15:32
Firewall will not help in this case.
Firewall is a protection already on the server. That is, the packages went to your VDS and you know, it is necessary to you or not.
Hoster turns off if the load goes to the channel to the server. A filter channel TO the server you can't - you just will not give access to equipment data center.
Are there any solutions in this situation:
To determine whether this is DDoS or normal load.
Maybe the project has grown and it is time to move to Dedicated? There and the channel is thicker and more stock.
- If it is still DDoS, update the host if they have any partners in any firm for protection from DDoS, you can usually get a discount. Then AT the beginning of the transfer the sites to another server, say the IP firm for the DDoS protection and change the DNS records as they say. It is necessary that the attacker didn't recognize our new IP.