search

magnussolution / magnusbilling7

MagnusBilling is a fast, secure, efficient, high availability, VOIP Billing.
https://www.magnusbilling.org
GNU Lesser General Public License v3.0
182 stars 106 forks source link

How to change web portal port from port 80 to another one to avoid a DDoS attack? #681

Open TZBDT opened 1 month ago

TZBDT commented 1 month ago

Hi,

We are facing a scenario where we are getting DDoS attacks on web port 80 choking the switch totally.

To do so the attacking IPs keep sending multiple continuous requests to open web portal at port 80 and over whelm the machine to a point where CPU usage goes to 100%, choking the switch. We have blocked several IPs but new IPs keep attacking the port.

Where do we need to make changes to make the web available on a non-standard web port?

Someone, please help!

Thank you.

viniciusbarretobr commented 1 month ago

Hello, you can change the Apache settings so that it listens on another port, or you can use a reverse proxy to filter access on port 80, such as Cloudflare for example, and in the Magnusbilling firewall allow incoming traffic on port 80 only for Cloudflare IPs.