How to avoid DDoS Attack

[→Striker←]

Set your iptables to avoid DDOS attacks
Set this on your firewall/router

iptables -A INPUT -p UDP -f -j DROP
echo "Block DDOS - SYN-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 9 -j DROP
echo "Block DDOS - Smurf"
iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m pkttype --pkttype broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - UDP-flood (Pepsi)"
iptables -A INPUT -p UDP --dport 7 -j DROP
iptables -A INPUT -p UDP --dport 19 -j DROP
echo "Block DDOS - SMBnuke"
iptables -A INPUT -p UDP --dport 135:139 -j DROP
iptables -A INPUT -p TCP --dport 135:139 -j DROP
echo "Block DDOS - Connection-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 3 -j DROP
echo "Block DDOS - Fraggle"
iptables -A INPUT -p UDP -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p UDP -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - Jolt"
iptables -A INPUT -p ICMP -f -j DROP

if someone PRO he think he could make better please correct me and dont blame...

[Modamer9]

This can put just in system Linux. I gues?

[→Striker←]

Yes because I'm using a linux host for Rappelz server ._.

[Judge12]

yep, linux is the system that uses iptables,
you cannot put this in any other type of router though,
most don't use iptables,

but as stated you can put these on a linux server and use it as a firewall.

most online hosts aren't going to give you access to their routers anyway.

and this won't work on a cisco(industry standard) router.

[Xijezu]

Sweet - Now try to get it working for Windows, or get Microsoft things (like in C++ coded Herlock/Princess) working on a Linux-Root.

[Judge12]

ok gimme a minute, there is a setup in windows that allows server 2k3, 2k8 to be router, firewall as well. i'll see what i can do. or, you could run it(the server) inside a vm on a linux box.

[gavsta]

Originally Posted by →Striker←

Set your iptables to avoid DDOS attacks
Set this on your firewall/router

iptables -A INPUT -p UDP -f -j DROP
echo "Block DDOS - SYN-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 9 -j DROP
echo "Block DDOS - Smurf"
iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m pkttype --pkttype broadcast -j DROP
iptables -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - UDP-flood (Pepsi)"
iptables -A INPUT -p UDP --dport 7 -j DROP
iptables -A INPUT -p UDP --dport 19 -j DROP
echo "Block DDOS - SMBnuke"
iptables -A INPUT -p UDP --dport 135:139 -j DROP
iptables -A INPUT -p TCP --dport 135:139 -j DROP
echo "Block DDOS - Connection-flood"
iptables -A INPUT -p TCP --syn -m iplimit --iplimit-above 3 -j DROP
echo "Block DDOS - Fraggle"
iptables -A INPUT -p UDP -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -p UDP -m limit --limit 3/s -j ACCEPT
echo "Block DDOS - Jolt"
iptables -A INPUT -p ICMP -f -j DROP

if someone PRO he think he could make better please correct me and dont blame...

easiest way to fix it, share the working epic 7.3 files.

[katalin21k]

i cant stop laughting @Striker hes a pro gyeeee
his gonna emulate all in linux
and after 1 week found an iptable on google...oh yeah...that one will stop the ddos ( mua muahahah)

[Pyrok]

You do realize that these attacks have pretty much killed any chance this community had of getting fully working files right? As far as I know the source had planned on giving permission to release the files after their server was up and running. There were also plans to release a real 6.2 server for those stuck on 32bit. Well, neither of those are going to happen now. If I were Xijezu I'd say screw it and create a small private server for trusted friends just like I did a long time ago.

Pretty sad when others have to try to force people to release their hard work just because they don't have the skills to create things themselves.

[→Striker←]

Originally Posted by katalin21k

i cant stop laughting @Striker hes a pro gyeeee
his gonna emulate all in linux
and after 1 week found an iptable on google...oh yeah...that one will stop the ddos ( mua muahahah)

Originally Posted by Pyrok

You do realize that these attacks have pretty much killed any chance this community had of getting fully working files right? As far as I know the source had planned on giving permission to release the files after their server was up and running. There were also plans to release a real 6.2 server for those stuck on 32bit. Well, neither of those are going to happen now. If I were Xijezu I'd say screw it and create a small private server for trusted friends just like I did a long time ago.

Pretty sad when others have to try to force people to release their hard work just because they don't have the skills to create things themselves.

So you both think that I'm the one who DDoSed DF???



Simple, I don't DDoS.

[Pyrok]

Originally Posted by →Striker←

So you both think that I'm the one who DDoSed DF???



Simple, I don't DDoS.

lol, sorry, my post was directed at katalin21k and gavsta

[wisp66]

nope striker we know exactly whos doing it and if it turned out to be the same russian team that smoke says screwed his team over i wouldnt be suprised the least what they fail to realise is ddosing is doing nothing more causing servers to close down in the end they still wont get any files and any work ive done i sure as hell know they wont ever see same goes for raskim and i think i can speak for xji when i say that pyroks right thats exactly why nothing got share and probly never will
my feelings on sharing were genuine same as everyone elses i mean that was the plan but 1 group had to ruin it for everyone else
why and how anyone assuming an attack would force us to give up what we have is beyond me.
its not a realistic plan

[TheOnlyOneRaskim]

For my person i can say, i only release my own created Stuff and this just when i think, i want to.

Like i said. In my Opinion they can DDoS how long they want, the ywould never get any file from me.

It like in my School time. Someone punche´s you in your face and want your Breakfast Money. Do not ever give him your money, otherwise they get what they wanted and will contuine this way.

[lowjoecool]

I say dont realease it, and keep kicking back. Maybe get your own team together and dos the noobs right back. BUT whatever you do dont give up please. Just keep working at it till either they find something better to do or give up or whatever.

[wisp66]

we have no plans to give up or stop even if that means going private server among friends for 6 months or less just long enough for them to give up and move to something else not saying dk will be closing just saying if it did thats what we would do