Title: IOSEC HTTP Anti Flood/DoS Security Gateway Module
Author: iosec
Published: <strong>2012년 5월 29일</strong>
Last modified: 2012년 10월 1일

---

플러그인 검색

이 플러그인은 **최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다**. 워드프레스의
좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 
있을 수 있습니다.

![](https://s.w.org/plugins/geopattern-icon/iosec-anti-flood-security-gateway-module.
svg)

# IOSEC HTTP Anti Flood/DoS Security Gateway Module

 작성자: [iosec](https://profiles.wordpress.org/iosec/)

[다운로드](https://downloads.wordpress.org/plugin/iosec-anti-flood-security-gateway-module.zip)

 * [세부사항](https://ko.wordpress.org/plugins/iosec-anti-flood-security-gateway-module/#description)
 * [평가](https://ko.wordpress.org/plugins/iosec-anti-flood-security-gateway-module/#reviews)
 *  [설치](https://ko.wordpress.org/plugins/iosec-anti-flood-security-gateway-module/#installation)
 * [개발](https://ko.wordpress.org/plugins/iosec-anti-flood-security-gateway-module/#developers)

 [지원](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/)

## 설명

This module provides security enhancements against (HTTP) Flood & Brute Force Attacks
for WordPress.
 Massive scanning tools (like vulnerability scanners), HTTP Flood
tools can be blocked or detected by this module. This module can be integrated with
htaccess, any firewall, iptables or etc. via “banlist” file.

To see a quick test page follow this link: http://www.iosec.org/test.php for proof
of concept.

Watch the proof of concept video: http://youtu.be/LzLY_SKLq9w

Note: Change the default configuration values before activating the plugin.

### CONFIGURATION DESCRIPTIONS

BENEFITS

 * You can block proxies (via header information)
 * You can detect flooding IP addresses.
 * You can slow down or restrict access for automated tools (HTTP DoS tools & Flood
   tools, Brute force tools, Vulnerability scanners, etc.)
 * You can save your server resources (database, cpu, ram, etc.) under an attack.
 * You can restrict access permanently or temporarily for listed IP addresses in“
   banlist” file.
 * You can notify yourself via email alerts when attacks begin.

CONS

 * You have to tweak configuration file and even script’s itself to avoid false 
   positives.
 * You have to restrict access for world writeable files and apply least privilige
   permissions to file properties.

Functions of files:

/wp-content/iosec_admin/

 * banlist (Detected IP addresses listed here. You can use this file with iptables,
   htaccess with bash scripts.)
 * banlisttemp (Just a system file. IP and Time correlations listed in it.)
 * ips (Just a system file. Every request is listed in it.)
 * whitelist (Excluded IP List seperated by new lines.)
 * excluded (Excluded File List seperated by new lines. E.g. for http://YOUR_SITE/
   wordpress/index.php file add this line to excluded file: /wordpress/index.php)

You should configure plugin by editing iosec.php file.

 1.  Connection Interval: This is second based interval for accepting another connection.
     
     If you choose value 1 (1 second), another request in 1 second will be suspended
     by module. You can enter values like 0.1, 0.001, etc.
 2.  Max. Connection Count: This is the interval based maximum connection limit count
     for accepting another connection.
      If you choose value 10 and your connection 
     interval is 1 second. This means only 10 connections permitted in 1 second.
 3.  Suspended Process Timeout: When a connection interval rule finds a connection 
     is not prohibited, this timeout value will be activated.
      For example, if connection
     interval is 1 and this value is 30 then, second connection in 1 second will be
     suspended for 30 seconds.
 4.  Page Redirection: You redirect your detected users to another page after timeout
     page disappears.
 5.  Send Me Mail: Module can send you a mail when an IP address detected.
 6.  Block Proxies: You can identify and block proxies via http header.
 7.  Show Debug Info: Time and IP information will be displayed on suspension page 
     when this option is activated.
 8.  Use Incremental Blocking: This option will increase time of suspension if attack
     is still happening.
      For example, if C.I. is 1 and a second connection happens
     in 1 second this will be suspended for 30 seconds (above ex.). If one connection
     in 10 seconds happens, this will increase suspension time when this option is 
     activated.
 9.  Implicit Deny Timeout: If you want to block every request as default for a timeout
     period (seconds), set this value to greater than “0”. This is an emergency option
     for DDoS attacks etc.
 10. Cached Requests: Monitoring data window size for last requests (for “ips” file
     size) (default is “150”).
 11. Implicit Deny for banlist Timeout: If you want to block every recorded IP that
     is listed in the banlist as default and let the human users to view page for a
     timeout period (seconds), set this value to greater than “0” (default is “0”).

CHANGES v.1.8.1 – v.1.8.2

 * Improved Implicit Deny for Banned IP Addresses (Deny without detection)
 * Minor Performance Tweaks

CHANGES v.1.5 – v.1.8

 * Added Implicit Deny for the Banned IP Addresses
 * Added Request Cache Size Option
 * Added Excluded Files Support
 * Added/Improved Implicit Deny Mode (with detection)

CHANGES v.1.3 – v.1.4

 * Added Connection Limit Support

CHANGES v.1.2

 * Added Whitelist Support

CHANGES v.1.1

 * Added Reverse Proxy Support
 * Added reCAPTCHA Support
 * Now Blocks Brute Force More Efficiently
 * Minor Security Fixes

Gökhan Muharremoğlu
 Information Security Specialist

You can reach me @
 Twitter: https://twitter.com/iosec_org gokhanmuh@users.sourceforge.
net gokhan.muharremoglu@iosec.org https://sourceforge.net/projects/iosec/ http://
www.iosec.org http://www.linkedin.com/in/gokhanmuharremoglu

## 스크린샷

[⌊Suspended Process screen when an attack is detected.⌉⌊Suspended Process screen
when an attack is detected.⌉[

Suspended Process screen when an attack is detected.

## 설치

 1. Upload “iosec.php” and “iosec_content” folder to the `/wp-content/plugins/` directory
 2. Activate the plugin through the ‘Plugins’ menu in WordPress

These files must be in world writeable mode (e.g. chmod 777) (locally):

/wp-content/iosec_admin/

 * ips
 * banlist
 * banlisttemp

To begin test with default values, try to refresh main page 3 or more times in a
second (connetion interval= 0.5, Connection count= 1)

## 후기

이 플러그인에 대한 평가가 없습니다.

## 기여자 & 개발자

“IOSEC HTTP Anti Flood/DoS Security Gateway Module”(은)는 오픈 소스 소프트웨어입니다.
다음의 사람들이 이 플러그인에 기여하였습니다.

기여자

 *   [ iosec ](https://profiles.wordpress.org/iosec/)

[자국어로 “IOSEC HTTP Anti Flood/DoS Security Gateway Module”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/iosec-anti-flood-security-gateway-module)

### 개발에 관심이 있으십니까?

[코드 탐색하기](https://plugins.trac.wordpress.org/browser/iosec-anti-flood-security-gateway-module/)
는, [SVN 저장소](https://plugins.svn.wordpress.org/iosec-anti-flood-security-gateway-module/)
를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/iosec-anti-flood-security-gateway-module/)
을 [RSS](https://plugins.trac.wordpress.org/log/iosec-anti-flood-security-gateway-module/?limit=100&mode=stop_on_copy&format=rss)
로 구독하세요.

## 기초

 *  버전 **1.8.2**
 *  최근 업데이트: **14년 전**
 *  활성화된 설치 **10+**
 *  워드프레스 버전 ** 2.0.2 또는 그 이상 **
 *  다음까지 시험됨: **3.4.2**
 *  언어
 * [English (US)](https://wordpress.org/plugins/iosec-anti-flood-security-gateway-module/)
 * 태그:
 * [gateway](https://ko.wordpress.org/plugins/tags/gateway/)[module](https://ko.wordpress.org/plugins/tags/module/)
   [security](https://ko.wordpress.org/plugins/tags/security/)
 *  [고급 보기](https://ko.wordpress.org/plugins/iosec-anti-flood-security-gateway-module/advanced/)

## 평점

 별 5점 만점에 5점.

 *  [  2/5-별점 후기     ](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/?filter=5)
 *  [  0/4-별점 후기     ](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/?filter=4)
 *  [  0/3-별점 후기     ](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/?filter=3)
 *  [  0/2-별점 후기     ](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/?filter=2)
 *  [  0/1-별점 후기     ](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/#new-post)

[모든  리뷰 보기](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/reviews/)

## 기여자

 *   [ iosec ](https://profiles.wordpress.org/iosec/)

## 지원

할 말 있으신가요? 도움이 필요하신가요?

 [지원 포럼 보기](https://wordpress.org/support/plugin/iosec-anti-flood-security-gateway-module/)

## 기부

이 플러그인이 발전하도록 도우시겠습니까?

 [ 이 플러그인에 기부하기 ](http://www.iosec.org/donate.html)