Take the 2-minute tour ×

For example an admin page that should not be visited unless with special cookie or query string token. The point being that anyone who tried and failed would likely be with bad intention. Or when the connection has ddos behavior.

Is there a way that if you determine that request is an evil one, you withhold that connection as long as possible, and return a package as large as possible , in a way that is without side effect to the server? Maybe redirecting to other special website? Or other better strategy? (I am using Nginx. But I guess this question is quite general.)

share|improve this question

closed as off-topic by pauska, joeqwerty, Dan, RobM, Ward Oct 27 '13 at 20:03


  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – pauska, joeqwerty, Dan, Ward

I should have make it more clear that I ask this question only for the technicality or how-to. –  user2643506 Oct 27 '13 at 18:42

1 Answer 1

"Punishing" someone seems like an idea that could backfire. Perhaps you'd be happy just to block them? For that look at Fail2Ban.

share|improve this answer
I just had to upvote this :D –  wlf Oct 27 '13 at 17:49
