Stopping DDos

[Angelokreikamp]

Dear readers,

I am a starting ISP in the netherlands and i am under attack by kiddy's using
a TCP flood.

Is there a mod that protect to most attacks

And yes i searched the forum all the links are dead

 

[Acceleratic]

CSF (http://configserver.com/cp/csf.html) can block most of them. But when a "hard" DDoS is there, you can better null-route the ip address

 

[Angelokreikamp]

ahh nice

i thank you

 

[mr.applesauce]

Nullroute is the worse idea ever. Use a software firewall and if you cant stop it with that then you might need to think about purchasing ddos filtering from a third party. Your isp might also be able to filter the attacks with their firwalls too. Nullrouting is the absolute last resort.

 

[Acceleratic]

Nullroute is the worse idea ever. Use a software firewall and if you cant stop it with that then you might need to think about purchasing ddos filtering from a third party. Your isp might also be able to filter the attacks with their firwalls too. Nullrouting is the absolute last resort.

Worse idea, or last resort? Make up your mind this aint helping.

Indeed contact your ISP if you haven't already. Make sure you reduce some costs for possible extra bandwidth. Some ISP's will say: "ill null route", easy solution. Some might do more.. keep us informed!

 

[Richard G]

Worse idea, or last resort? Make up your mind this aint helping.

What do you mean by "make up your mind"? Normally you use the worse idea as a last resort (if used at all), so I don't understand your confusion.

@Angelo: Did you also implent the Antiloris protection? If not... look it up, it can help too, depending on the way you are attacked.
I'm also from the Netherlands. Implementing CSF/LFD is something you should start with in any case.

 

[Acceleratic]

What do you mean by "make up your mind"? Normally you use the worse idea as a last resort (if used at all), so I don't understand your confusion.

@Angelo: Did you also implent the Antiloris protection? If not... look it up, it can help too, depending on the way you are attacked.
I'm also from the Netherlands. Implementing CSF/LFD is something you should start with in any case.

In my opinion it's not a worse idea because there is, mostly(!), nothing much in between. Inform me if otherwise.

Like i said, and agree, CSF is a good start

 

[Richard G]

In my opinion it's not a worse idea because there is, mostly(!), nothing much in between.

Oh in that case I understand, i got the impression you thought worse idea and last resort were two different things.
Indeed I agree with you that if not possible via firewall and/or antiloris, there isn't much in between.

@Angelo: Have you tried already? If not or if you need any help, send me a pm or email.