Layer 7 help.

[Mental Retro]

Hi,

I have some problems i use Cloudflare "I'm under attack" tcp proxy for client and that should work yes? No actually it doesn't People could take down the site so i tried some stuff like configuring FASTCGI change Quelenght to 1000000 and that didn't help.

I bought Http proxy in xznetworks and tried to set it up don't know if this is right configured because i'm really tired.

Here is pic on my cloudflare settings



I don't know what more i need to fix to get rid of these attacks do you? I appreciate all help

Kind regards,
Mental retros

[MentaL]

[MrSpooks]

If who ever is attacking you already has your real i.p address then all that is useless you need to get your provider to change your I.P for you.

[Mental Retro]

If who ever is attacking you already has your real i.p address then all that is useless you need to get your provider to change your I.P for you.

No, he does not. He attack port 80 (http)

[Retro Sontig]

Hmm...
It's probably someone using some free booter, I suggest you to buy something like hyperfilter,

[MrSpooks]

No, he does not. He attack port 80 (http)

Just because he is attacking port 80 dose not mean he dose not have your real i.p.

[Trickey1337]

If you just installed this, then it's useless as he already has your real IP and not the Cloudflare IP. There's also ways to get around Cloudflare unless you set it up properly.

[NOC]

I thought I would reply here after someone sent me the link,

Step one - Get a new server IP
Step two - Buy a TCP proxy and apply it before making your hotel open to the public
step three - Do NOT share your servers ip with anyone even if they are trusted they can still back stab you at anytime then you are back this issue again

As for your HTTP i would think you need to cname your domain for the www and your direct A record will point to the IP address which the provider sent to you.

[Exonize]

I can easily see your problem,

1) CloudFlare Free is no DDoS Protection, Layer 7 attacks go through CloudFlare.
2) Your HTTP proxy is hosted at OVH, OVH does not handle Layer 7 attacks that well.

My advice is to buy HWP at HyperFilter, this fixed all my problems.

[Droppy]

No, he does not. He attack port 80 (http)

Make a domain bruteforce and check if your IP can be found.

[Mathis Hbx]

I can easily see your problem,
2) Your HTTP proxy is hosted at OVH, OVH does not handle Layer 7 attacks that well.

The servers games handles l4/l7 attacks (https://www.ovh.co.uk/dedicated_servers/game/) its not the same VAC.

And its soon ready for the OVH VPS SSD/Cloud

[Mental Retro]

Actually i have bought tcp & http proxy and i don't need anything more. The guy showed infront of me he used kinda shell booter udp flood attacked link and site was dead so no he does not have my ip im not an idiot that makes it visible :p any more ideas?

[NOC]

Who did you buy the proxy from because some companies protection is really not worth using.

[Exonize]

The servers games handles l4/l7 attacks (https://www.ovh.co.uk/dedicated_servers/game/) its not the same VAC.

And its soon ready for the OVH VPS SSD/Cloud

Not really convinced. I'm not an expert or anything but I believe that Layer 7 attacks is pretty hard to stop as they seems very legit(pretty much like a real user). And people are always coming up with these new methods to bypass the filters/protection. So I don't know how it would work? wouldn't OVH need to manually patch these new methods?

Please let me know if I'm wrong.

[Mental Retro]

IIS is weak i think or are there other smart methods to mitigate these attacks?

[NOC]

@Mental Retro you can simply order our free HTTP service, you do not need to customer of any paid service simply order point your A record to our protected address and we do the rest.

[Noisecontroller]

IIS is weak i think or are there other smart methods to mitigate these attacks?

Maybe this one?
Dynamic IP Restrictions
Link: Dynamic IP Restrictions : The Official Microsoft IIS Site

[Mental Retro]

Maybe this one?
Dynamic IP Restrictions
Link: Dynamic IP Restrictions : The Official Microsoft IIS Site

Already tried that does not seem to work or i have done something wrong, i use iis 7.5

- - - Updated - - -

@Mental Retro you can simply order our free HTTP service, you do not need to customer of any paid service simply order point your A record to our protected address and we do the rest.

done!