DDoS protection

[stylenww]

Anyone here who know a good DDoS script to ubuntu 4.12

We currently have a whole lot of problems with people who think it's damn fun to DDoS us, so now we have found something DDoS protection that works, we are willing to pay!

[CloudCUBE]

You're not going to be protected with scripts. you need to invest into hardward to do active filtering such as arbor

 

or network level filtering from an ISP

[stuntnmore]

Theres not alot you can really do to be honest, you can get a server passby firewall or try mod security or evade but wont protec 100%, best bet is hardware firewall mixed with software firewall which is pricey

[proclan]

The problem with ddos attacks is they have more or less exploded in instances this year and it's not just game hosting getting attacked it's everybody large and small. Hardware firewalls that work somewhat are also very expensive and none of them guarantee 100% protection. There are some simple ways to keep attacks to a minimal.

 

1. Don't post your server ip's on your web site.

2. Don't hand them out to people requesting test ip's through live chat or email, this may sound rude but then again ask them to purchase a server and give them a refund if they are not happy.

3. You can also give them a test ip from the Data Center you are using or location they are requesting.

 

Some people may also think the second option is stupid as well but you have to look at it though the idiot's mind that is planning on attacking you. Don't make it easy for them.

 

Now your clients will add your ip's to game-tracker, game-monitor, etc, etc nothing you can do about that but to give a ddos'er easy access to your ip's is not helping you at all.

[ECF]

Recently some companies have started including hardware DDOS protection when you rent a server from them.

 

If you rack your own servers then you would need some hardware to mitigate the attacks.

 

Also, if running windows you can somewhat effectively use a combo of windows firewall and IPSEC to catch and ban IPs you find by running a netstat command on your server. However this is a reactive approach and not proactive.