Hey guys, im just wondering i have a CentOS VPS and sometimes it gets taken down by packet kiddies. Its only a matter of banning the user from the forums or IRC that is running on it, and wham they just smash it off line like no tomorrow.

Im wondering about IPTables and such, so many sites have so many different rules to add and such, but id like someone who has had experience with this to reply.

I would like to mitigate the damages from the HTTP Flood(TCP/UDP i think) and SYN flooding. How would someone go about dropping the packets that are bad, or classed as an attack, or is this simply the problem at this day and age? Someone once said its pointless to use IPTables, because i needed to actively filter the ip's at the time of attack. Given this its impossible to access the SSH of the box while this is happening. HELP!

I personally don't know much about Linux, but that's a good question for my sys admin, he's real groovy with Linux :)