My web-app tracks various online services and to do so, makes frequent outgoing TCP and UDP requests (through PHP).
Unfortunately, my web-app was recently hit by a DDoS attack. To counter it, I installed a proxy for incoming requests (CloudFlare) and this seems to work well.
I'm using a virtual Ubuntu Server (on Amazon EC2) and I want to connect to a PPTP VPN server to route outgoing traffic through this connection. To do this, I specify the following two options:
defaultroute
replacedefaultroute
This works - but the moment the tunnel to route the traffic is established, my SSH connection to the server is broken and I can't reconnect.
For example, I'd like to monitor all outgoing connections initiated from my machine. Is there a simple way to do this?
I'd like to ignore incoming requests. For example, if my machine is a server, and someone visits foobar.com which is hosted on my server, then I'm considering that an incoming request.
I've got a cheap VPS running Ubuntu 12.04 that I sometimes proxy web traffic through via SSH when I don't trust the network I'm on. I'd like to have a closer look at some of that traffic on occasion.
I run a web server (Debian Squeeze on a VPS), and the graphs provided by the hosting company show consistently that around twice as much traffic is incoming to the server compared to the outgoing traffic.
I am a Windows (IIS) software engineer, but recently I've been thrown into a Linux server admin role until we can find someone to fill the position. I am not ashamed to admit I have no idea what I am doing.
Currently the problem I am trying to solve is that the server is only responding to https requests. However, we need it to respond to standard http requests as well.
I understand that somebody would want to block incoming traffic as a general rule except for public resources. And I also understand that you could want to block all outgoing traffic except for certain external services.
But is there any serious security risk if I allow incoming traffic that represents responses to previous outgoing traffic, e.g. HTTP requests?
I am on a network where outgoing port 8080 is blocked on most machines (i.e.
I'm running ubuntu server in an EC2 instance. This server just does the job of executing some perl scripts.
I want to block all outgoing ports on this server.