[-Davee-]

Hey

My server runing on Linux Debian 100/100Mbit.

It some days of his passed my server is attacked the normal ping 15-20 but the attack start from 200 in time and few hours ago it +1000
A what kind of attack is this? How would I be able to stop it?
I didn't see any suspicious Ip on server log or IPtraf!

I use Advanced Policy Firewall..

Please help me

[HydraX]

it might be a DoS

[BP13]

dos means denial of service so therefore he would not be on the internet in the 1st place.

why the ping might be high?

- nearing bandwidth limit
- upload speed to slow
- nearing the end of the month


- I'm not sure if this is even a attack

[Towlies]

At least how you are explaining it, it seems like its an attack if the ping is raising for everyone not just you.

My best recommendation is to SSH/VNC into the box and start analyzing packet content to see where the flood is coming from this can be accomplished with Wireshark.

When you find the attacking IP(s) this topic can help you with blocking them most likely through iptables or possibly a higher networking level. http://forum.sa-mp.com/index.php?topic=55106.0

[Pilotatc999]

Go to portforward.com, and CLOSE all your ports except the ones you are currently using. Also GET a firewall...

This is essential security, or your computer will be open to any hackers.

[Towlies]

Quote:

Originally Posted by Pilotatc999 Go to portforward.com, and CLOSE all your ports except the ones you are currently using. Also GET a firewall... This is essential security, or your computer will be open to any hackers.

If you read his original post he states and I will quote "My server runing on Linux Debian 100/100Mbit.".

So from that I am gonna assume its being ran in a data center of some sort in which case port forwarding is of none of your concern since that server will have its own IP. I do recommend a firewall but its not really people trying to forcefully hack him its a attack which can be filtered.