Author Topic: Defend against ddos attacks  (Read 4642 times)

0 Members and 2 Guests are viewing this topic.

Offline DataFlow

  • Serf
  • *
  • Posts: 23
  • Cookies: -1
    • View Profile
Defend against ddos attacks
« on: February 11, 2013, 05:50:48 pm »
What its the best way to defend against ddos attacks?

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Defend against ddos attacks
« Reply #1 on: February 11, 2013, 07:47:41 pm »
Depends what kind of attack, whats it targetted at and what OS you use.
Please give more details.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline DataFlow

  • Serf
  • *
  • Posts: 23
  • Cookies: -1
    • View Profile
Re: Defend against ddos attacks
« Reply #2 on: February 11, 2013, 08:23:11 pm »
Linux.

Its a private game server.

and we are being ddosed at rate 10 GBit/s

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Defend against ddos attacks
« Reply #3 on: February 11, 2013, 09:02:02 pm »
Like proxx said, still depends on what kind of attack. A UDP flood or SYN flood(any type of flood that does not require or use an established connection) will be 10GBit/s no matter what you do at your end. In this case you will have to contact the hosting provider and ask them to block it at a higher level so that the traffic never reaches your server.

However, many flood types are only effective because of poorly written services that will just accept tons and tons of gibberish data without severing the connection. In this case, just add the IP address of the flooder to iptables or if on windows, whatever firewall policy you are using.
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Defend against ddos attacks
« Reply #4 on: February 11, 2013, 10:07:12 pm »
You could try to drop the packets with iptables.
Use drop and do not actively block the packets.
But as stated thats a lot of traffic.

Blocking the IP's is possible however not always practical.
You basically dont want to generate CPU cycles.

What kind of traffic are you receiving?
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Stackprotector

  • Administrator
  • Titan
  • *
  • Posts: 2515
  • Cookies: 205
    • View Profile
Re: Defend against ddos attacks
« Reply #5 on: February 12, 2013, 10:16:43 pm »
You might consider blocking everything and only allowing some ip's (as i assume it is a PRIVATE server)
~Factionwars

Offline WirelessDesert

  • Knight
  • **
  • Posts: 356
  • Cookies: 10
  • I think...
    • View Profile
Re: Defend against ddos attacks
« Reply #6 on: February 12, 2013, 10:39:06 pm »
You might consider blocking everything and only allowing some ip's (as i assume it is a PRIVATE server)
Just a question: Wouldn't blocking IP's just generate more problem then doing something else, since then you(the server) have to check if the ip is blocked, and then ignore to send any packets to it!??
Check out my arduino project: Moving car - School project!
"I'm like current, I always take the easiest route."

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Defend against ddos attacks
« Reply #7 on: February 12, 2013, 11:53:28 pm »
Just a question: Wouldn't blocking IP's just generate more problem then doing something else, since then you(the server) have to check if the ip is blocked, and then ignore to send any packets to it!??

You are most certainly right. But the alternative is much worse; Your services taking all the traffic and being unresponsive. Unless its a flood not targeting services ofc. In which case, there is no point in blocking it if the server is still more or less responding.

With that being said, iptables(assuming you are using linux) has a pretty decent performance. The DoS needs to be pretty hardcore and the filter list pretty huge before any performance issues arise.


EDIT: This is also another reason to contact the hosters and ask them to block IP's before they ever reach you.
« Last Edit: March 06, 2013, 06:10:07 pm by ande »
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline iTpHo3NiX

  • EZ's Pirate Captain
  • Administrator
  • Titan
  • *
  • Posts: 2920
  • Cookies: 328
    • View Profile
    • EvilZone
Re: Defend against ddos attacks
« Reply #8 on: February 13, 2013, 06:38:13 am »
CloudFlare
[09:27] (+lenoch) iTpHo3NiX can even manipulate me to suck dick
[09:27] (+lenoch) oh no that's voluntary
[09:27] (+lenoch) sorry

Offline Stackprotector

  • Administrator
  • Titan
  • *
  • Posts: 2515
  • Cookies: 205
    • View Profile
Re: Defend against ddos attacks
« Reply #9 on: February 13, 2013, 07:29:11 am »
CloudFlare
In don't think a premium cloud DNC would help a private gaming server. Serverside solutions or isp solutions. Or buy some extra hardware.
~Factionwars

Offline h4xx0r

  • /dev/null
  • *
  • Posts: 8
  • Cookies: -6
    • View Profile
Re: Defend against ddos attacks
« Reply #10 on: February 13, 2013, 08:58:54 am »
In don't think a premium cloud DNC would help a private gaming server. Serverside solutions or isp solutions. Or buy some extra hardware.


Cloudflare won't provide protection for your gaming servers.
Like the guy said above, you need to contact the datacenter and ask them to block the intruder IP at a level higher than you have access to so the DDoS doesn't even reach the DC.