Need Anti DDOS pf Rules

08/06/2015 22:40 Birender#1

Hi someone DDOSed my server and I couldnt do anything to protect it.I found a post by Shougun ,

[Only registered and activated users can see links. Click Here To Register...]

a complete tutorial but it throws syntax error wen I try to run command "/etc/rc.d/pf start"

Spoiler

If anyone has sample pf.conf for FreeBSD 9.x .Please help.Its urgent

08/06/2015 23:21 .CHHorny#2

Your kernel dont got ALTQ support.

Here a quick guide how to add it.

Replace the 9.0 with your version.

If you got amd64:

PHP Code:


			
fetch ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/9.0-RELEASE/src.txz

else

PHP Code:


			
fetch ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/9.0-RELEASE/src.txz

after its downloaded execute these commands:

PHP Code:


			
tar -C / -xvzf src.txz
cd /usr/src/sys/`uname -m`/conf && ee GENERIC

paste here:

PHP Code:


			
device pf
device pflog
device pfsync
options         ALTQ
options         ALTQ_CBQ
options         ALTQ_RED
options         ALTQ_RIO
options         ALTQ_HFSC
options         ALTQ_PRIQ
options         ALTQ_NOPCC

save it and run:

PHP Code:


			
cd /usr/src && make buildkernel KERNCONF=GENERIC

and when its finished:

PHP Code:


			
cd /usr/src && make installkernel KERNCONF=GENERIC

After reboot your server and the pf should run without any problems.

Also better edit this [Only registered and activated users can see links. Click Here To Register...] and upload it via sftp/ftp to prevent those syntax issues.

08/07/2015 08:24 Birender#3

I will try and update you

08/10/2015 15:07 Birender#4

It works but its not that much effective as he continues to DDos me

08/10/2015 20:01 .pW#5

Quote:

Originally Posted by Birender

It works but its not that much effective as he continues to DDos me

Hello the rules won't help u so much if the attacks is to big no rule cant handle it u should buy a DDOS Protection from ur hoster which also can't safe everything its everything about the strength of the ddos. If u still want some tips message me.

08/12/2015 15:30 Birender#6

Can you suggest me a better host with AntiDDOS protection.But dont include OVH in this list

08/12/2015 16:11 #dynastie#7

Quote:

Originally Posted by Birender

Can you suggest me a better host with AntiDDOS protection.But dont include OVH in this list

Why not OVH? KMS is maybe a good alternative.