(D)DoS-Deflate (Effective DoS Protection)

[pimpinjg]

sherwood, apf and csf are just iptables front so basicaly the same but csf has a couple more features i personally like.

[Jungleboy]

APF with some script changes works wonders for me

[SplitIce]

I use APF myself. Never had any (D)DOS problems (not sure if I have been attact or not)

Meh,
SplitIce

[Speakup]

(D)DOS is not that strong unless you edit the permissions. Also a program wont protect you against a hard ddos attack you need firewall.

[Gavo]

DDos Deflate seems to work very well for me, my server IP seems to be prone to small attacks (left over from the person that run the IP before me i think)

I had a site that moved to my server that had a hugh attack for 24 hours and I needed to compile a basic apache build (it broke lol) and raise the hard server limit and max apache process to 4000 to cope with this (still hit 4k) and change the ddos cron to 10 secs.

If you tweak apache to cope with the traffic make sure you have at least 100/100 unmetered port and at least 3GB of ram and a large swapfile.