How to avoid DDoS Attack

04/01/2012 21:57 →Striker←#1
Set your iptables to avoid DDOS attacks
Set this on your firewall/router

Code:
iptables -A INPUT -p UDP -f -j DROP
echo "Block DDOS - SYN-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 9 -j DROP
echo "Block DDOS - Smurf"
iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m pkttype --pkttype broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - UDP-flood (Pepsi)"
iptables -A INPUT -p UDP --dport 7 -j DROP
iptables -A INPUT -p UDP --dport 19 -j DROP
echo "Block DDOS - SMBnuke"
iptables -A INPUT -p UDP --dport 135:139 -j DROP
iptables -A INPUT -p TCP --dport 135:139 -j DROP
echo "Block DDOS - Connection-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 3 -j DROP
echo "Block DDOS - Fraggle"
iptables -A INPUT -p UDP -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p UDP -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - Jolt"
iptables -A INPUT -p ICMP -f -j DROP
if someone PRO he think he could make better please correct me and dont blame...
04/01/2012 22:06 Modamer9#2
This can put just in system Linux. I gues?
04/01/2012 22:07 →Striker←#3
Yes because I'm using a linux host for Rappelz server ._.
04/01/2012 22:15 Judge12#4
yep, linux is the system that uses iptables,
you cannot put this in any other type of router though,
most don't use iptables,

but as stated you can put these on a linux server and use it as a firewall.

most online hosts aren't going to give you access to their routers anyway.

and this won't work on a cisco(industry standard) router.
04/01/2012 22:36 Xijezu#5
Sweet - Now try to get it working for Windows, or get Microsoft things (like in C++ coded Herlock/Princess) working on a Linux-Root.
04/01/2012 22:57 Judge12#6
ok gimme a minute, there is a setup in windows that allows server 2k3, 2k8 to be router, firewall as well. i'll see what i can do. or, you could run it(the server) inside a vm on a linux box.
04/01/2012 22:59 gavsta#7
Quote:
Originally Posted by →Striker← View Post
Set your iptables to avoid DDOS attacks
Set this on your firewall/router

Code:
iptables -A INPUT -p UDP -f -j DROP
echo "Block DDOS - SYN-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 9 -j DROP
echo "Block DDOS - Smurf"
iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m pkttype --pkttype broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - UDP-flood (Pepsi)"
iptables -A INPUT -p UDP --dport 7 -j DROP
iptables -A INPUT -p UDP --dport 19 -j DROP
echo "Block DDOS - SMBnuke"
iptables -A INPUT -p UDP --dport 135:139 -j DROP
iptables -A INPUT -p TCP --dport 135:139 -j DROP
echo "Block DDOS - Connection-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 3 -j DROP
echo "Block DDOS - Fraggle"
iptables -A INPUT -p UDP -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p UDP -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - Jolt"
iptables -A INPUT -p ICMP -f -j DROP
if someone PRO he think he could make better please correct me and dont blame...

easiest way to fix it, share the working epic 7.3 files.
04/01/2012 23:04 katalin21k#8
i cant stop laughting @Striker hes a pro gyeeee
his gonna emulate all in linux
and after 1 week found an iptable on google...oh yeah...that one will stop the ddos ( mua muahahah)

[Only registered and activated users can see links. Click Here To Register...]
04/01/2012 23:41 Pyrok#9
You do realize that these attacks have pretty much killed any chance this community had of getting fully working files right? As far as I know the source had planned on giving permission to release the files after their server was up and running. There were also plans to release a real 6.2 server for those stuck on 32bit. Well, neither of those are going to happen now. If I were Xijezu I'd say screw it and create a small private server for trusted friends just like I did a long time ago.

Pretty sad when others have to try to force people to release their hard work just because they don't have the skills to create things themselves.
04/02/2012 03:18 →Striker←#10
Quote:
Originally Posted by katalin21k View Post
i cant stop laughting @Striker hes a pro gyeeee
his gonna emulate all in linux
and after 1 week found an iptable on google...oh yeah...that one will stop the ddos ( mua muahahah)

[Only registered and activated users can see links. Click Here To Register...]
Quote:
Originally Posted by Pyrok View Post
You do realize that these attacks have pretty much killed any chance this community had of getting fully working files right? As far as I know the source had planned on giving permission to release the files after their server was up and running. There were also plans to release a real 6.2 server for those stuck on 32bit. Well, neither of those are going to happen now. If I were Xijezu I'd say screw it and create a small private server for trusted friends just like I did a long time ago.

Pretty sad when others have to try to force people to release their hard work just because they don't have the skills to create things themselves.
So you both think that I'm the one who DDoSed DF???

[Only registered and activated users can see links. Click Here To Register...]

Simple, I don't DDoS.
04/02/2012 03:28 Pyrok#11
Quote:
Originally Posted by →Striker← View Post
So you both think that I'm the one who DDoSed DF???

[Only registered and activated users can see links. Click Here To Register...]

Simple, I don't DDoS.
lol, sorry, my post was directed at katalin21k and gavsta :)
04/02/2012 03:45 wisp66#12
nope striker we know exactly whos doing it and if it turned out to be the same russian team that smoke says screwed his team over i wouldnt be suprised the least what they fail to realise is ddosing is doing nothing more causing servers to close down in the end they still wont get any files and any work ive done i sure as hell know they wont ever see same goes for raskim and i think i can speak for xji when i say that pyroks right thats exactly why nothing got share and probly never will
my feelings on sharing were genuine same as everyone elses i mean that was the plan but 1 group had to ruin it for everyone else
why and how anyone assuming an attack would force us to give up what we have is beyond me.
its not a realistic plan
04/02/2012 03:49 TheOnlyOneRaskim#13
For my person i can say, i only release my own created Stuff and this just when i think, i want to.

Like i said. In my Opinion they can DDoS how long they want, the ywould never get any file from me.

It like in my School time. Someone punche´s you in your face and want your Breakfast Money. Do not ever give him your money, otherwise they get what they wanted and will contuine this way. ;)
04/02/2012 05:27 lowjoecool#14
I say dont realease it, and keep kicking back. Maybe get your own team together and dos the noobs right back. BUT whatever you do dont give up please. Just keep working at it till either they find something better to do or give up or whatever.
04/02/2012 05:48 wisp66#15
we have no plans to give up or stop even if that means going private server among friends for 6 months or less just long enough for them to give up and move to something else not saying dk will be closing just saying if it did thats what we would do