Today I would like to publish a short article with some examples how a firewall/WAF can be implemented with PHP. I have created 4 examples including a whitelist, a blacklist, a blacklist with a text file as IP blocklist and an example for the implementation of a mini-WAF. All code examples are designed to be …
I had already published a comprehensive article about a firewall script that is supposed to prevent flooding attacks and port scans, among other things. However, it is also possible to block entire countries from the outset – without IP lists. Of course, such IP lists would then no longer need to be updated. The current …
This article is a continuation of my previous article which also dealt with attacks on web servers. The following article shows how an attack can be detected and blocked – and that completely without paid tools. The script does not only protect against flooding attacks but also against larger port scans due to the way …
Mit der Plesk Juggernaut Firewall ist es möglich die Anzahl der gleichzeitigen Verbindungen pro IP-Adresse auf bestimmten Ports zu limitieren. Es empfiehlt sich vorher zu prüfen, ob die Funktion tatsächlich genutzt werden kann: Anschließend kann in der Juggernaut Konfigurationsdatei – welche wir mit öffnen – nach der Einstellung CONNLIMIT gesucht werden. Das Limit wird stets …
You are using Plesk with a firewall solution like Juggernaut Firewall and FTP connections to your server take long time? Then this article might be helpful for you, especially if it comes to a timeout (connection timed out) or the connection setup is very slow and your FTP client shows “ENTERING PASSIVE MODE” for a …
Your server does not deliver any web pages anymore or only responds with the error code 502? Then it could be an attack on your server or your website/shop. This can be recognized by Plesk errors like“1024 worker_connections are not enough while connecting to upstream” or many requests with the mysterious status code“PRI * HTTP/2.0“. …
Many users are increasingly unsettled because of Russia’s cyberattacks. Many wonder if you now need another AntiVirus software (article on Kaspersky) and maybe even a hardware firewall. SPI firewall and incoming connections Most routers already have a built-in firewall, which of course blocks attacks and requests from the outside. In this case, the router should …
Thanks to Russia, we now all have to do without Kaspersky, and the US is not exactly trustworthy either. As a result, it seems only right to look around for alternatives. One of these alternatives is the firewall software TinyWall (external link). After installation, it blocks by default all network traffic that the software does …
Further attacks by various hacker groups, including from Russia, are to be expected. One of the reasons for this is that state actors want to compromise systems in preparation (just in case). Update as of 27.02.2022: The BSI also shares the assessment of an increased threat situation and noted increased scanning activities among NATO partners. …
It came as it had to, the Microsoft SQL Server is currently being targeted by 3 different groups. First, the attackers perform a scan on an existing MSSQL server and then a brute force attack to take it over After the attackers crack the login to the MSSQL server, they are able to execute programs …