Anti-DDOS script, feedback requested

Hi Sean,

 

 

That looks good. You might consider resetting (reject) or dropping (drop) packets on the connection if a client makes a request to to /botcheck without a cookie instead of sending another redirect. Also, you could change the botcheck references to something else to make it less obvious what you're doing with the redirect and cookie.

 

 

Aaron