according to last attack on many big sites and manufactured , especially DDOS Attack on @Dyn which is the most stable with full security against these types of attacks .
today i will write some tips to how secure your sites with following tips :
net.ipv4.tcp_syncookies = 1
After that save the file and either reboot your server or issue the following command to apply the changes:
When you have the SYN Cookies enabled, you may see the following in your messages log (tail -f /var/log/messages):
“possible SYN flooding on port 80. Sending cookies”
in order to stop this type , you should disable wordpress user agent from visiting your site .
all you do is some lines on .htaccess file .
BrowserMatchNoCase WordPress bad_bot
Deny from env=bad_bot
while your site have alot of visitors . attackers can cause harm by send alot of http flood requests
using many tools which is available on internet . these causing some limitation if you are on VPS or sharehosting package .
to stop this attack all you do is using vanish or other cashing service . but my advise is
to use Nginx as webserver . or hiawatha web server .
this plugin allow you to use customized nginx modules with your apache and works together
to high performance . all you can do is install it via command line . but before you install it . make sure to enable cluster in your whm .
tar xf nginxadmin.tar
it is only compatible with easy apache 3