[Help]Firewall & Hackers

[Xurbus]

I've been attacked by 5 different ips in the last 30 min all with these warnings
"Denial of Service "Ping of Death" attack detected.
Description:
In a Ping of Death attack, the hacker uses a packet with a size that is larger than the normal standard. When your system encounters a packet of this size, it often crashes, hangs, or reboots."

and my firewall detects them every few min,the outgoing and incoming are way up in the firewall
see picture

http://i144.photobucket.com/albums/r166/Gladius_GM/help.jpg


I "Ip banned" them all from the firewall but they keep attacking, could someone help me solve this problem?

 

[kip0130]

i had that issue before i installed mobloc/pergaurdian
Phoenix Labs

 

[SiK]

Black Ice Server Firewall is a good firewall with IPS integrated made for blocking DoS / POD attacks. (I use it on all my dedicated box's)

 

[Xurbus]

could you link me with the firewalls please

 

[kip0130]

i forgot about that i have it downstiars
Black Ice Defender firewall

 

[Xurbus]

could i get one that i don 't have to pay for

 

[username1]

sage

Just ignore it. Or get a new IP.

P.S. software firewalls are useless.

 

[hardwyrd]

Re: sage

Just ignore it. Or get a new IP.

P.S. software firewalls are useless.

IPTables/Netfilter on Linux _are_ software firewalls yet they bring solid defense. These are kernel-based firewalls, while those in Windows are application firewalls. Meaning, if you get attacked, Windows gets it first even before the application can react.

As my previous suggestion states, put Linux in front to facilitate your internet connection, put up a proxy server. Windows machines point to the Linux server as the gateway.

 

[Xurbus]

Re: sage

Just ignore it. Or get a new IP.

P.S. software firewalls are useless.

if i ignore it, my comp is ****, a 3500$ comp loads like crap


could i get a link with firewalls ^^ , im using media center




edit- ihave more than 1 comp hooked up to that router and it only effects 1 comp

 

[NoPeace]

Re: sage

if i ignore it, my comp is ****, a 3500$ comp loads like crap


could i get a link with firewalls ^^ , im using media center




edit- ihave more than 1 comp hooked up to that router and it only effects 1 comp

The attack is happening against your router and not your PC. Your router is simply just forwarding the packets to your PC. Hence why your software based firewall is picking it up.

You can easily tell your router to stop forwarding the packets and you won't see any warning messages from your firewall. But that doesn't stop the attack.

The only real way to stop the attack is to contact your ISP and inform them on what is happening. Then they will block the packets from coming to your house.

You can also change your router's IP to the ISP by resetting your modem. That will stop the traffic from getting to your house in the mean time while you contact your ISP about the attack.

NoPeace - out

 

[Xurbus]

im contacting my isp right now, i reseted the router & now im calling them

 

[SHANG]

OMG! i've installed "Black Ice Firewall" and my windows is ****!,
Black Ice just Crashed all available things on my Windows,
also it restarts my comp 10 times (ABNORMALY) .. until i manually Deleted this
****. and when evrything was just fine, on next morning (yes, today) my comp is at the black screen with some missing Win file (XP) and i've just Deleted my old win, with so much programs and configs and.. its seems ill have to rebuild all my old configs for 1 day

 

[SiK]

OMG! i've installed "Black Ice Firewall" and my windows is ****!,
Black Ice just Crashed all available things on my Windows,
also it restarts my comp 10 times (ABNORMALY) .. until i manually Deleted this
****. and when evrything was just fine, on next morning (yes, today) my comp is at the black screen with some missing Win file (XP) and i've just Deleted my old win, with so much programs and configs and.. its seems ill have to rebuild all my old configs for 1 day

Well then;

1.) You downloaded a Warez copy of Black Ice which included some script kiddie virus.

or

2.) Your computer had severe problems before that were simply waiting to manifest themselves.

Because I've used Black Ice on multiple dedicated server's for a while without any type of issues.

 

[Ron]

OMG! i've installed "Black Ice Firewall" and my windows is ****!,
Black Ice just Crashed all available things on my Windows,
also it restarts my comp 10 times (ABNORMALY) .. until i manually Deleted this
****. and when evrything was just fine, on next morning (yes, today) my comp is at the black screen with some missing Win file (XP) and i've just Deleted my old win, with so much programs and configs and.. its seems ill have to rebuild all my old configs for 1 day

Don't mess with warez if you don't know what you're doing.

 

[kip0130]

Don't mess with warez if you don't know what you're doing.

expescially if you dont get it from a "reputable source " some script kiddie probably rebuilt it

 

[SHANG]

expescially if you dont get it from a "reputable source " some script kiddie probably rebuilt it

I just tryed it as any other FIREWALLS.

NVM is the Kaspersky Anti Hacker good for my Server PC ?

 

[Sardaukar]

Here is how to fix it:


Disable your router from responding to pings. Should have an option to allow it...

 

[Xurbus]

Here is how to fix it:


Disable your router from responding to pings. Should have an option to allow it...

hm could you tell me where it is located?
im using a linksys BEFSR41

 

[hardwyrd]

OMG! i've installed "Black Ice Firewall" and my windows is ****!,
Black Ice just Crashed all available things on my Windows,
also it restarts my comp 10 times (ABNORMALY) .. until i manually Deleted this
****. and when evrything was just fine, on next morning (yes, today) my comp is at the black screen with some missing Win file (XP) and i've just Deleted my old win, with so much programs and configs and.. its seems ill have to rebuild all my old configs for 1 day

And the lesson? ---- purchase a legal copy!

Just because you don't know how to use it (plus you got it from somewhere with doubtful quality), doesn't mean it is "fecal matter" (i dont want to degrade myself ^_^).

I've been using it for years and only updating the engine, and updating my baselines. RTFM if you want it to work well for you.

 

[username1]

sage

hm could you tell me where it is located?
im using a linksys BEFSR41

Try reading the manual before asking, it'll save you time and having to Post and wait for replies if you've found the answer already.

Hint: Page 24