UndergroundNet Posted March 23, 2013 Share Posted March 23, 2013 Well, my site is a big target for dumb kiddies using their crappy booters.I was pretty annoyed because my site was down for 2 hours. One of my members told me to look into DDoS filters.How do I make/get/install a DDoS filter on my site?Thanks! Link to comment Share on other sites More sharing options...
Rooney Posted March 23, 2013 Share Posted March 23, 2013 Use Cloudflare it will be more helpful from this DDoS attacks Link to comment Share on other sites More sharing options...
Yuu Posted March 23, 2013 Share Posted March 23, 2013 Install CloudFlare, or get a DDoS protected host. Sometimes DDoS protected hosts work better than CloudFlare. Need some IPB, MyBB, or HTML/CSS work done? Check out my thread! Link to comment Share on other sites More sharing options...
Guest CheaTax Posted March 23, 2013 Share Posted March 23, 2013 You can use https://www.cloudflare.com/ for get some protection..most websites use this.....very gud one..webflake also use this one... or you have to get DDOS protected hosting.... Link to comment Share on other sites More sharing options...
Administrator Tony Posted March 24, 2013 Administrator Share Posted March 24, 2013 Any respectable host would offer solid DDOS protection.. unless of course you're using "free" hosting, offshore hosting, or work with a reseller; all of which, are "you get what you pay for" scenarios. Even CloudFlare isn't 100% reliable (as evidenced by WebFlake's downtime the last few days). If you want true DDOS protection, use a legitimate host. Just my two-cents. 1 Link to comment Share on other sites More sharing options...
Jrock Posted March 24, 2013 Share Posted March 24, 2013 Just be aware, if you are ever on your own dedicated, you will have to buy/lease your own firewall for it, or space within a firewall. This could double the cost of the actual server itself, depending on what kind of setup you are on. I doubt you are on a dedicated server, but knowledge never hurt. Link to comment Share on other sites More sharing options...
UndergroundNet Posted March 24, 2013 Author Share Posted March 24, 2013 I'm running it off from a VPS, it's protected by Cloudflare, I changed it so that all of the subdomains go through Cloudflare too.I know that it's protected against TCP/UDP attacks because I've tried those myself. I think the attacker is using some Layer 7 attacks, is there any way I can make some DDoS filters for these? Link to comment Share on other sites More sharing options...
Guest Imperious Posted March 25, 2013 Share Posted March 25, 2013 Ok guys - Cloudflare is bullshit. Why? Lets see... It just hides your ip adress. Sure hackers enter the url and think its the right ip adress but imagine they know abit abt ddos. They will go to cmd and ping your site directly: ping direct.WEBSITE.com then use the real ip to ddos. which is easy. my experience is, that iptables can block almost 80% of the ddos atks. Use this: iptables -I INPUT -p tcp -d IP --dport 80 -m state --state NEW,ESTABLISHED -m recent --set -j ACCEPTiptables -I INPUT -p tcp --dport 80 -m state --state NEW -m recent --update --seconds 3 --hitcount 20 -j DROPiptables -A OUTPUT -p tcp -s IP --sport 80 -m state --state ESTABLISHED -j ACCEPT for port 80 - and modify it for 443 and 8080 too. - Try it, it really works. This, finally someone who realizes Cloud Flare is complete garbage.I have also had a good experience with ipTables, my site was getting DDoSed for almost 2 months, after I installed this the attacks stopped and it gave me a chance to install even better protection.If you can't afford the costly mitigation services from a company like Black Lotus, this is your best bet.Don't even bother with Cloud Flare, the attackers have your IP anyways and Cloud Flare won't do shit besides make things more annoying and/or worse! Link to comment Share on other sites More sharing options...
Swift aka AnonyWS Posted March 26, 2013 Share Posted March 26, 2013 Cloudflare aren't shit if you are using your brain. Most sites don't use their brains, and they get attacked because their DNS can be resolved easily. Put all your DNS Under the orange cloud, then the attacker has no IP Address to attack on. But now, he can attack you with HEADER Attack, which means to block that you'll need to put on "I'm under attack mode" then you can put the TTL on for one week. You should be pretty safe with that, if you are running a forum that sends out mails. You should considering using php mail so they can't gain your servers IP Address by looking up on the header information on your mail.. If you're already under a attack, do what i said above then change your server IP Address. That should stop it all! There is no need buying Cloudflare PRO Unless you are going to make custom error pages. On 3/24/2013 at 2:22 AM, Davlin said: Any respectable host would offer solid DDOS protection.. unless of course you're using "free" hosting, offshore hosting, or work with a reseller; all of which, are "you get what you pay for" scenarios. Even CloudFlare isn't 100% reliable (as evidenced by WebFlake's downtime the last few days). If you want true DDOS protection, use a legitimate host. Just my two-cents. Sorry, but lol. I talked with Phun about it, i managed to resolve the IP Address of the domain because he didn't put all hes DNS Under the orange cloud. I could easily ping mail.webflake.net in command prompt and get webflake's IP Address. However, that problem is fixed, if webflake ever gets attacked again he have to put on "I'm under attack mode" which should protect it against all kind of attacks such as HEADER/GET/POST. On 3/25/2013 at 8:00 AM, ProHex said: Ok guys - Cloudflare is bullshit. Why? Lets see... It just hides your ip adress. Sure hackers enter the url and think its the right ip adress but imagine they know abit abt ddos. They will go to cmd and ping your site directly: ping direct.WEBSITE.com then use the real ip to ddos. which is easy. my experience is, that iptables can block almost 80% of the ddos atks. Use this: iptables -I INPUT -p tcp -d IP --dport 80 -m state --state NEW,ESTABLISHED -m recent --set -j ACCEPTiptables -I INPUT -p tcp --dport 80 -m state --state NEW -m recent --update --seconds 3 --hitcount 20 -j DROPiptables -A OUTPUT -p tcp -s IP --sport 80 -m state --state ESTABLISHED -j ACCEPT for port 80 - and modify it for 443 and 8080 too. - Try it, it really works. Sorry, but same answer as i already said. Put all the DNS under the orange cloud, so they can't resolve it. Use phpsendmail to send the mails so they can't get your real server IP Address. Put on "I'm under attack mode" And good luck to the so called "Hackers" i mean, ddosers. Link to comment Share on other sites More sharing options...
Administrator Tony Posted March 26, 2013 Administrator Share Posted March 26, 2013 Sorry, but lol. I talked with Phun about it, i managed to resolve the IP Address of the domain because he didn't put all hes DNS Under the orange cloud. I could easily ping mail.webflake.net in command prompt and get webflake's IP Address. However, that problem is fixed, if webflake ever gets attacked again he have to put on "I'm under attack mode" which should protect it against all kind of attacks such as HEADER/GET/POST. Fun fact: I don't have to bother with any ridiculous configuring of third-party services. Why? Because I purchased legitimate web hosting, and the provider has an outstanding security team. I've been hit by more than a few DDOS attacks over the last year, and each of them were resolved in 30 minutes or less (most in less than 5). So, my statement still stands: spend cheap, expect cheap. 1 Link to comment Share on other sites More sharing options...
Swift aka AnonyWS Posted March 26, 2013 Share Posted March 26, 2013 On 3/26/2013 at 10:26 AM, Davlin said: Fun fact: I don't have to bother with any ridiculous configuring of third-party services. Why? Because I purchased legitimate web hosting, and the provider has an outstanding security team. I've been hit by more than a few DDOS attacks over the last year, and each of them were resolved in 30 minutes or less (most in less than 5). So, my statement still stands: spend cheap, expect cheap. Fine, give me your doamin and i'll confirm it if they are migrated in 30min or less. Most DDoS Protected hosting providers are charging $500/month for the 3gbps protection.. Godaddy has decent protection thought. Link to comment Share on other sites More sharing options...
Administrator Tony Posted March 26, 2013 Administrator Share Posted March 26, 2013 Why in the hell would any sensible person invite a DDOS attack, or anything of the sort? I personally don't care if you believe me or not, I have nothing to prove to you, and GoDaddy's service speaks for itself. They're cheaper than virtually any other host out there, and absolutely offer far better quality and support than any provider. FYI, GoDaddy's anti-DDOS is standard with all shared hosting accounts (including most dedicated hosting). 1 Link to comment Share on other sites More sharing options...
Swift aka AnonyWS Posted March 26, 2013 Share Posted March 26, 2013 On 3/26/2013 at 12:45 PM, Davlin said: Why in the hell would any sensible person invite a DDOS attack, or anything of the sort? I personally don't care if you believe me or not, I have nothing to prove to you, and GoDaddy's service speaks for itself. They're cheaper than virtually any other host out there, and absolutely offer far better quality and support than any provider. FYI, GoDaddy's anti-DDOS is standard with all shared hosting accounts (including most dedicated hosting). Because i know i can shut down your whole datacenter with 6milion pps. Link to comment Share on other sites More sharing options...
Administrator Tony Posted March 26, 2013 Administrator Share Posted March 26, 2013 I seriously doubt that. In fact, if I were a betting man, I'd place a hefty wager. I run multiple gaming communities, and have dealt with far worse. Regardless, you're teetering dangerously on the edge of making threats, and I'm not liking it. Don't go stroking your e-peen though, because I'm not intimidated. I suggest you find a different topic. 1 Link to comment Share on other sites More sharing options...
UndergroundNet Posted March 27, 2013 Author Share Posted March 27, 2013 This, finally someone who realizes Cloud Flare is complete garbage.I have also had a good experience with ipTables, my site was getting DDoSed for almost 2 months, after I installed this the attacks stopped and it gave me a chance to install even better protection.If you can't afford the costly mitigation services from a company like Black Lotus, this is your best bet.Don't even bother with Cloud Flare, the attackers have your IP anyways and Cloud Flare won't do shit besides make things more annoying and/or worse!Actually if you delete/rename/make traffic go through cloudflare the subdomains, that doesn't work. Link to comment Share on other sites More sharing options...
Recommended Posts