SA-MP Forums Archive
Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) (/showthread.php?tid=588884)



deldeldeldel - MazaHACKa - 13.09.2015

deldeldeldeldel


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - cm666 - 14.09.2015

Then write a solution to the problem is not destiny ? Not what you 'd done it as root.The problem is solved with a flood iptables or some other way ? Either a software filter ?


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - Michael B - 14.09.2015

In my opinion the host should deal with this kind of situations, not the customer. It's good that you found a solution to avoid this though.


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - mw3samp - 14.09.2015

I had the same problem.. its fixed now


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - cm666 - 14.09.2015

Quote:
Originally Posted by mw3samp
View Post
I had the same problem.. its fixed now
How ?


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - Jake187 - 15.09.2015

Quote:
Originally Posted by Michael B
View Post
In my opinion the host should deal with this kind of situations, not the customer. It's good that you found a solution to avoid this though.
If you're using your own VPS or dedicated server than you're your own host and sometimes things these are needed. I am not saying the thread creator actually has a good fix going because it isn't public but of course if it did go public they could easily make a work around if they wanted likely.


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - Sublime - 15.09.2015

I think it's a UDP SYN flood. Fake IPs, as you mentioned is a direct result of IP spoofing.

You can filter the attack by limiting the amount of pending connections if you run Linux/iptables or you can use a hardware firewall to take care of it. Either way, PM me your script and I'll look into it.


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - LocMax - 16.09.2015

Sent you skype request.
Same happening here, it's like thousands and thousands of connections in a second.


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - ATomas - 16.09.2015

Have you server in OVH ?


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - LocMax - 16.09.2015

Yes, OVH dedicated server.


Re: Connections Flood. 500+ IP/second [SYN Flooding/IP Spoofing Attacks] Solution share! (Private, for free) - ATomas - 16.09.2015

Quote:
Originally Posted by LocMax
View Post
Yes, OVH dedicated server.
I have OVH too. Contant your support.