Quote:
Originally Posted by boneskiss
that is for freebsd, unix systems.
'
I'll answer once for all. i'm the one who flooded 2 weeks ago CO oficial. i can prove.As DDOS flooder, from my expenrience are 2 ways to stop flood.
1. hide your ip(exist some whost when u dns them they dont give ip, but u can connect on them)
2. filter your ip (provider/networks admin can filter your ip port, flood come on one port for exemple port 53/80/115/443...etc, or can come on random port flooder setup port 0 (it come more packs on diferit ports).
u cant stop alone flood even if u use windows or unix. provider network admin can do it, but u may cant use some ports, internet will go slower.
depend who flood u, what way he do it, how he do it, what kind of flood he use and what power he have. if he have over 50MB/s upload on linux server (one or more servers) and he use juno (juno send death packets, some times can go over filtred ports) your provider can do only one thing to close your ip.
|
Actually, [D]DoSing on common ports such as 80, 443, 8080, etc is not the most effective way. The best way is usually to do the whole range of 1-65535. Also, just shut the machine down. Depending on the complexity of the script/program, it may stop if it senses that the packets aren't going through. Though, most people use premade tools or noobish scripts that just open a connection and loop without closing it continuously.
Or, if you want to be funny, reflect the packets/connections off to somewhere like FBI.Org. Your server will still be taking the hit and most likely stay offline, but they'll be unknowingly attacking a much bigger fish. :p
Anyway, jokes aside, there are quite a few good routers that can take the punch out of a [D]DoS attack. When I was working at HackThisSite!, we got DDoS attacks quite a lot, because people thought it was part of the "challenges". We ended up using a Cisco router and null routes to stop the attacks, and it actually worked quite well. For a little basic information on null routes, see
this Wikipedia page. It ought to prove a wee bit useful to you.