The script against DDOS attacks

I will give an example of a simple script against DDOS attacks for NAT servers.
The script is executed when the total number of “conntrack” connections is more than 500000, it saves to the text file the IP address which has the most “conntrack” connections, who has more than 10,000 – adds to the ipset list.

Continue reading “The script against DDOS attacks”

Solution “Port is not compatible with aggregators in channel 1 and cannot attach to them”

Once on Cisco Catalyst 6509-E, when I collected an aggregation of three ports, traffic began to go through only two ports and a message appeared in the logs:

Continue reading “Solution “Port is not compatible with aggregators in channel 1 and cannot attach to them””