DDOS Attack

[r0x]

I am the target of DDOS attacks,
The target of the attacker is the the GameServer port after the attack the MySQL database is automatically turned off, and I do not know why.

Can anyone help?

[Aikimaniac]

nobody can help you except your ISP

[Maraxer]

If you have some mysql query quota set and somebody makes your server to make lot of query's by DDOS than Mysql will deny every query in next hour. So if you set

Code: Select all

MAX QUERIES PER HOUR 0  MAX UPDATES PER HOUR  0 MAX CONNECTIONS PER HOUR 0 

than Mysql probably won't shut down. But it's better to deal with attackers by some flood protector.

[r0x]

Tip of the Day: Softlayer is a SHIT

To send the charge to your card are fast, but to help mitigate a DDOS attack is slow. Too slow!

[ThePhoenixBird]

nobody can help you except your ISP

The only way is to fight back

[r0x]

I take what I said,
They are now more willing to help.

But unfortunately there is plenty to do.

At least now MySQL does not turn off. : D
-
Good mood: always

[MELERIX]

try PeerBlock: http://www.peerblock.com/ at least it helps to block ip ranges directly from your network card via driver.

also you can block specific ranges by: country, companies, spammers, flooders and others using this lists: http://www.iblocklist.com/lists.php

good luck

[Gnacik]

If its massive ddos it will not help. because packet must go to your network card, and then is dropped by firewall. interface just stuck because too many packets. massive ddos can be blocked only by isp before server on routers. some small childish ddos can be stopped by iptables firewall or at least can be reduced.

[r0x]

The DDOS attack is huge, 5Gbps without stopping.

The ISP is doing everything possible, but attackers will not give up.

Thanks for the tips, I am researching everything about the attack.

[kama3a]

only moneys can help you against DDoS attack.
Rent a proffesional ddos protection, or buy a cisco router with realy big internet connection.

Most of the ISP give up and block you.

no one from the Internet security institutions will do something to stop it or tell him "stop its against the law".

[regenx]

One option for you is to Install OS WIn2k8R2 Enterprise or Standard server editions, activate IPSec with akamai and others win. services for Dropping Packets, activate Win. firewall ON for private and ON for public, open your gameserver and loginserver ports ONLY for private from firewall ofcourse and you're DONE.

Good Luck !

[Szponiasty]

One option for you is to Install OS WIn2k8R2 Enterprise or Standard server editions, activate IPSec with akamai and others win. services for Dropping Packets, activate Win. firewall ON for private and ON for public, open your gameserver and loginserver ports ONLY for private from firewall ofcourse and you're DONE.

Good Luck !

Nope. No software solution will protect against DDoS (problem causes huge amount of packets on network interface, not OS being unable to process them).

[regenx]

I know, for massive attacks you cant, but with some win services some people can drop packets from flood attacks.

If we all started to flood one to another, people at Microsoft would have already devastated
..and linux users too.


Check your server logs, send an email to your internet provider and CALL the mtherfcker and put him in jail !

Flooding is illegal and punishable by imprisonment / JAIL in most countries around the world !

[r0x]

Look what I found:
http://msdn.microsoft.com/en-us/library/Aa302363

Same as "SYN cookies" of Linux.

[Szponiasty]

Look what I found:
http://msdn.microsoft.com/en-us/library/Aa302363

Same as "SYN cookies" of Linux.

The goal of successful DDoS is making host unaccesible through internet. So if your os starts dropping packets and doesnt reply to requests = DDoS is successful (how you determine during DDoS which requests are valid and which are not?!). So - there is no software protection against DDoS.