[Doubt] About DDoS Attacks.

[adz28]

Is it possible to stop'em using a .htaccess file? Because the attack goes to the FTP of the dedicated server so I have no idea of how to protect it.
Thanks in advance.

 

[Ron]

Use linux with iptables.

 

[adz28]

It's a windows dedicated server, the game is hosted on it can be runned just in a windows one.

 

[Mucski]

Is it a paid genuine host , or it's private dedicated server? Because usually paid genuine hosts already have DDoS attack protection ... well most of them.

 

[adz28]

Yup, it's a paid one, but the protection they bring me is not so useful tbh.

 

[MentaL]

software based firewalls only go so far, the real king is hardware which for you to have enabled on your host will cost a lot of money.

 

[Ron]

iptables will be sufficient to block ddos attacks for most people on this forum as most private servers are attacked by a single person or very small group of people.

Use linux as your primay OS and run windows in vmware.

 

[Sardaukar]

A true hardware firewall eats yoru pocket out. Ive got a base one for my own home that I can control - its a big intelligent 24 port gigabit switch - but the average user wont be paying 700-800 for a setup like I have.

If you want a provider host protection for DDoS, it requires someone to be at the console ready to intervene, which is very expensive . If I remember right, you have to pay an arm and a leg per day for specific protection.

 

[Nas67]

No , IPtables & .datadrops are your best bet. You should use linux as your OS and vmware should be used in running wares and such.

-67

 

[uebari]

iptables will be sufficient to block ddos attacks for most people on this forum as most private servers are attacked by a single person or very small group of people.

Use linux as your primay OS and run windows in vmware.

You make me laugh....

IPTables are generally used as Firewall protection against DDoS.... Whoever or whom taught you this is simply ill in the mind.

 

[jMerliN]

If you're QOS'd by your ISP, the inbound traffic, even with hardware, can still saturate your line.

You need to be on a backbone with hardware that's in front of any router/firewall doing QoS on your connection to be truly effective. Better to go with a host that specifically offers uptime services and DDoS mitigation.

 

[Ron]

You make me laugh....

IPTables are generally used as Firewall protection against DDoS.... Whoever or whom taught you this is simply ill in the mind.

iptables is a very useful tool. If you doubt this you need to go back to your basics of system security in linux.

 

[Intelligence]

This kinda great ideas guys. Some of you says that Linux is more protected than Windows, so maybe I'll use Linux as my OS in my next server and use VMWare for running window stuff. That would be better isn't?

What is IPTables, btw? Can you please tell me what is it.

 

[RckyCls]

What server? FlyFF? You'll get so much work if you'll use linux as OS on a flyff server.

Let me google that for you

 

[s-p-n]

Use linux as your primay OS and run windows in vmware.

Why would you install VMWare on a server?


Anyway, iptables in Linux can be better compared to Windows Firewall than "DDOS" protection. Sure, it's a very useful tool- it may even be an essential tool for some things- but it's silly to call a (software) firewall sufficient protection for a Distributed Denial of Service attack.

Think of this diagram:

Let's assume iptables is on the computers in the above diagram from Cisco. The bandwidth causing the "Denial of Service" would need to be more than your computer's capacity, and less than the capacity of your ISP and also less than the capacity of your router or any other interference.

It's very unlikely the affected service is actually the server containing iptables- and even if it is- there is still a point where more bandwidth could overwhelm the system; Any software on either computer is not a solution for arbitrary numbers.

A good solution would deny your services to the attackers at the earliest possible point- which usually isn't an option. Like jMerliN said, there are services (which may be expensive), but manage to mitigate DDOS attacks.



The battle between "software" and "hardware" firewalls is a joke. Every piece of computer hardware has software to drive it. Obviously you need both hardware and software to route some incoming requests while rejecting malicious ones. It's where you put this device that matters more than the hardware/software you use- such as iptables or some other firewall.

 

[uebari]

iptables is a very useful tool. If you doubt this you need to go back to your basics of system security in linux.

But yet your so used to windows... and must have recently went to linux since you oh so used "WAMP" LOL... sad story trying to act all high and might... you have a lot of room to grow and you need it horribly.