What can you do about DDoSers?

What can you do about DDoSers? - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: Other (https://sampforum.blast.hk/forumdisplay.php?fid=7)
+--- Forum: Everything and Nothing (https://sampforum.blast.hk/forumdisplay.php?fid=23)
+--- Thread: What can you do about DDoSers? (/showthread.php?tid=321868)

What can you do about DDoSers? - Smithy - 28.02.2012

Guys, just curious. What can you do about DDoSing servers/communities on you? We've been DDoSed and have been for the past two hours and we know who it is, another SA:MP community but what can we do about it other than firewall?

Re: What can you do about DDoSers? - iPLEOMAX - 28.02.2012

Report it to their country's ISP.

Re: What can you do about DDoSers? - willzyyy - 28.02.2012

Well,use firewall.. I heard Argo RPG got hacked and ddoser's were caught,lol.
offtopic- what font is that in your sig 'role play' ?

Re: What can you do about DDoSers? - Smithy - 28.02.2012

What's that really gonna' do? Most ISP's will do sod all, I know UK ones won't.

Re: What can you do about DDoSers? - Dripac - 28.02.2012

Where do you host your server?

Re: What can you do about DDoSers? - Landon - 28.02.2012

Quote:

Originally Posted by Dripac

Where do you host your server?

It's on a VPS hosted by a hosting company, we know who is DDoSing us.

Re: What can you do about DDoSers? - Mauzen - 28.02.2012

Quote:

Originally Posted by Michael23

It's on a VPS hosted by a hosting company, we know who is DDoSing us.

Point is that most of the times people know who the dos'er is, they just know his internet identity, and this doesnt mean anything. If you got his name send this info and all relevant logs to his or your provider. Especially ask your hoster for connection logfiles, or better ask him to take care of it, if its a reliable hoster they will manage it, as its an attack on one of their servers.

First thing to do is always adding a DROP entry to the iptables for the attacking IP. Most "ddos" attacks are just "dos" attacks, and not distributed in any way, as it is just a single guy running a dos flooder on his own computer, most do not even use proxy connections. So they dont got much power, dropping all packets from that ip will reduce effects to a minimum or to nothing.
It just starts getting ugly when iterative changing IPs and a whole bunch of attacking machines come into play.

Re: What can you do about DDoSers? - suhrab_mujeeb - 29.02.2012

If another SA-MP community members are ddosing you, I think you should report the community to the SA-MP team.

Re: What can you do about DDoSers? - Jake187 - 29.02.2012

Make sure your game server dedicated/VPS is not having any other port besides the FTP 21 and SA-MP 7777 open. Because as you know SA-MP already has implanted limit connections from an IP address and you can do the same with FTP config settings. Once this is done try to get KVM over your dedicated/VPS and disable SSH so that that port isn't left open for people to attack.

Long as you do not leave ports open for people to attack they will have nothing to attack. They can ping your server but you can easily talk to your hosting company about how to help prevent that from doing any serious issues. And they should be able to provide ways, but it's also very unlikely that can do anything. If anything their network will pick it up more than you would alone and with 24/7 support they will catch it no problem.

Re: What can you do about DDoSers? - iLinx - 29.02.2012

Quote:

Originally Posted by Jake187

Make sure your game server dedicated/VPS is not having any other port besides the FTP 21 and SA-MP 7777 open. Because as you know SA-MP already has implanted limit connections from an IP address and you can do the same with FTP config settings. Once this is done try to get KVM over your dedicated/VPS and disable SSH so that that port isn't left open for people to attack.

Long as you do not leave ports open for people to attack they will have nothing to attack. They can ping your server but you can easily talk to your hosting company about how to help prevent that from doing any serious issues. And they should be able to provide ways, but it's also very unlikely that can do anything. If anything their network will pick it up more than you would alone and with 24/7 support they will catch it no problem.

Unfortunately this won't do anything. If your server gets DDoSed with 2Gbit and your port is only 100Mbps, your server will go down, no matter what you block and how you connect to your server.