I have a apache 2.0 server running on redhat enterprise. The problem is that every 10 minutes or so, a attempted ddos using SYN connections will take the site down, untill I manually add the IP to the iptables and restart the iptables service as well as apache. I have DoS Evasive isntalled, but it is not helping. I need for a experienced admin to come up with a solution which will actively run and stop users from having more than 20 syn connections. THIS NEEDS TO BE A DEFINITIVE SOLLUTION TO A SYN DDOS. A cron tab script was developed and runs every 60 seconds, clearing bad users, however it does not appear to be working. Only experienced admins need apply.
## Deliverables
1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done.
2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables):
a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment.
b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request.
3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement).
## Platform
RH enterprise