Sign in with
Sign up | Sign in
Your question

Stop DDOS Attack ?

Tags:
  • Security
  • Gaming
  • Servers
  • Business Computing
Last response: in Business Computing
Share
October 10, 2012 8:02:19 PM

Hello,

I Have a gaming server , and some kids are DDOSing my Server eveyday .

Its the same set of IPs every time and they appear in every DDOS attack log .

please help , thanks :) 

More about : stop ddos attack

October 10, 2012 8:11:28 PM

you may need to learn a little networking but you should be able to drop packets from those ip addresses pretty easily.

You could also see if there are laws applicable, and report the IPs to the authorities. one visit by a cop to their parents will probably stop them pretty good. If they're attacking from the same IP, they're probably pretty stupid.
Related resources
October 10, 2012 8:21:31 PM

I'm guessing this is a minecraft server? I know I had a lot of problems with that when I ran one..
Best things to do:
Drop the packets
Send an email to their isp and report the issue.
Threaten the kids with ^ (It helps if you have this story that you can talk about to one of your staff, it goes something like this: Hey John, did you remember that one kid that was giving us grief? John: No, what happened? You: Oh, well it was hillarious, he was harassing our server so I sent an email to his isp. John: lol, what happened? You: Man, they sent an email to his dad, and his dad was PISSED. The little kid sent me an email apologizing, and the last I heard, he's banned from playing online. John: LOL)


You get the idea. Works like a charm.
October 10, 2012 8:27:06 PM

very simple firewall ACL config to block those IP's would essentially "ban" them from ever connecting to the server from those IP's again.

Also, might wana look into an IDS/IPS to detect such threats from other IP's

in CISCO:
config t
access-list 10 deny <ip address of attacker>
access-list 10 deny <ip address of attacker>
...
access-list 10 permit any
int eth0
ip access-group 10 in
copy run start


Any those IP's are banned...
October 10, 2012 8:36:52 PM

Is it a linux server by any chance? If so, you can use iptables top block the packets.

To block address 1.2.3.4 run:
iptables -I INPUT -s 1.2.3.4 -j DROP (careful with this, as it takes effect immediately!)

Also to make this survive a restart (depending on the distro) I believe in redhat/centos the file to edit is /etc/sysconfig/iptables
October 10, 2012 9:21:21 PM

i will try this , this is a GTA SA Multiplayer , and i'm not using linux . also no packet lost
October 11, 2012 12:45:06 PM

Windows .

btw how to drop the packets ?
October 11, 2012 7:34:48 PM

Which windows?? XP 7 ? Server 2003, 2008 ? ?
October 11, 2012 7:44:32 PM

Use a VPN. It's like a proxy but for your whole system.

It will change your ip address averting the packets to the ip address' real location.

There are tons of free vpns on google Free vpn is a good one. Or you could torrent one.

Then again, whoever is hitting you they already have your ip...well, at least you have some advice to avoid this in the future. :lol: 
October 11, 2012 8:15:43 PM

aaab said:
Which windows?? XP 7 ? Server 2003, 2008 ? ?


windows 7 , i want how to drop the packets
October 11, 2012 9:34:42 PM

Win 7, home? Home basic?. Pro, ultimtate? You need to be specific mate.
October 11, 2012 9:35:09 PM

thexalchemist said:
Use a VPN. It's like a proxy but for your whole system.

It will change your ip address averting the packets to the ip address' real location.

There are tons of free vpns on google Free vpn is a good one. Or you could torrent one.

Then again, whoever is hitting you they already have your ip...well, at least you have some advice to avoid this in the future. :lol: 



Ummmmmmmm I don't think so Tim.
October 11, 2012 9:35:34 PM

Windows 7 Ultimate 64 bits .
October 11, 2012 9:43:36 PM

It's a DATAcenter , No I Don't Have access to the router
October 11, 2012 9:47:29 PM

Firewall Disabled :/ 


+ Link 404 Not found
October 11, 2012 9:53:55 PM

You could try install zone alarm? Careful, as this may block your access to the server. Only do this if you have access to the server console e.g. iLO or DRAC etc
October 11, 2012 10:02:49 PM

aaab said:
Ummmmmmmm I don't think so Tim.

Tim?
October 11, 2012 10:09:35 PM

thexalchemist said:
Tim?



It's a saying. Basically means you don't know what your talking about.
October 11, 2012 10:16:32 PM

aaab said:
Win 7, home? Home basic?. Pro, ultimtate? You need to be specific mate.



No he doesn't... It doesn't matter what edition of Windows 7 he is using...
October 11, 2012 10:24:01 PM

xendrome said:
No he doesn't... It doesn't matter what edition of Windows 7 he is using...



You are correct! :)  I didn't realize that all versions of windows 7 use the same firewall (for some reason I thought they were different). However it doesn't really matter as the firewall is off. It's also good practice to be specific, e.g. if he had said that he had windows 7 ultimate in the OP it could have saved some time :) 
!