PenUltima Online

It is currently Fri Sep 05, 2008 3:46 am

All times are UTC - 8 hours




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: DOS Attack...
PostPosted: Thu Feb 28, 2008 4:18 pm 
Offline
User avatar

Joined: Fri Dec 28, 2007 11:19 pm
Posts: 91
Location: Montreal, Canada
I'm not sure where I could post this kind of things.

I've read about these kinds of attacks and it's really hard to find a solution. Our shard of 150players average will goes down now until the new version is made (running pol097 ;) ) because of all this shit... You know how it is a lot of work to get a shard working stable and fun to play and how we can be devoted sometimes.... I would strongly have a hint how to stop or prevent Dos Attack. I'm just ... I just feel mad about it.


Oh and by the way.. Internal Web Server is disable...


Top
 Profile  
 
 Post subject:
PostPosted: Thu Feb 28, 2008 7:37 pm 
Offline

Joined: Sat Aug 04, 2007 2:51 pm
Posts: 7
I'll try to help if I can. Some questions for you...

How do you know you are being attacked? What type of attack is it? There are lots of different kinds of DOS attacks. Some are trivial to block, some are complex to block. Also, the more systems involved, the harder it will be to block. But that's still relative to how they are attacking.

Any POL logs, IDS/IPS logs, tcpdump output and/or iptables packet logs could help. Don't just post stuff here, but just say what you have, and describe what you see. If there's something that could be analyzed in the types of logs you have, we'll work out what you'll need to send.


Top
 Profile  
 
 Post subject:
PostPosted: Fri Feb 29, 2008 1:42 pm 
Offline

Joined: Wed Aug 29, 2007 2:44 pm
Posts: 24
You can have some firewalls/packet filters to filter some more specific kinds of DOS attacks (usually using some "bugs" in protocol design). But if attacker is just flooding and has enough of bandtwich, there is NOTHING, you can do. Even if you are discarding such packets, they are blocking your line...


Top
 Profile  
 
 Post subject:
PostPosted: Fri Feb 29, 2008 5:23 pm 
Offline
User avatar

Joined: Fri Dec 28, 2007 11:19 pm
Posts: 91
Location: Montreal, Canada
"flooding and has enough of bandtwich, there is NOTHING, you can do". We got a 100mbits/s but he is using like 3 differents servers against us... Fuck it I'm really disapointed.


Top
 Profile  
 
 Post subject:
PostPosted: Fri Feb 29, 2008 5:26 pm 
Offline
User avatar

Joined: Fri Dec 28, 2007 11:19 pm
Posts: 91
Location: Montreal, Canada
"flooding and has enough of bandtwich, there is NOTHING, you can do". We got a 100mbits/s but he is using like 3 differents servers against us... Fuck it I'm really disapointed.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Mar 01, 2008 12:46 pm 
Offline

Joined: Sat Aug 04, 2007 2:51 pm
Posts: 7
Contact me via IM and I will do my best to help you. Yes - it may be difficult or complex, but the problem CAN be tackled. I have experience handling small-scale attacks such as this on servers and networks.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style based on FI Subice by phpBBservice.nl