Hi. I have a problem with the icecast. When I activate the service I am having an exesive consumption in the ip queries. It seems like a DDOS attack. How can I mitigate this attack? Thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180605/bd03e5eb/attachment.htm>
I think you should contact to your connectivity provider, hopefully they can provide you the Anti DDOS protection. On Tue, Jun 5, 2018 at 2:16 PM, Victor Moreno <vitjam at gmail.com> wrote:> Hi. > > I have a problem with the icecast. When I activate the service I am having > an exesive consumption in the ip queries. It seems like a DDOS attack. How > can I mitigate this attack? > > Thanks. > > > _______________________________________________ > Icecast mailing list > Icecast at xiph.org > http://lists.xiph.org/mailman/listinfo/icecast > >-- Alejandro Flores L. LIA. CEH. VCP. 5513998178 -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180605/28f692b4/attachment.htm>
I ask because I only receive attacks when I activate icecast. I can not do anything at the application level ?. i used ubuntu server 16.04. thanks. 2018-06-05 14:52 GMT-05:00 Alejandro Flores <alex at mordormx.net>:> I think you should contact to your connectivity provider, hopefully they > can provide you the Anti DDOS protection. > > > On Tue, Jun 5, 2018 at 2:16 PM, Victor Moreno <vitjam at gmail.com> wrote: > >> Hi. >> >> I have a problem with the icecast. When I activate the service I am >> having an exesive consumption in the ip queries. It seems like a DDOS >> attack. How can I mitigate this attack? >> >> Thanks. >> >> >> _______________________________________________ >> Icecast mailing list >> Icecast at xiph.org >> http://lists.xiph.org/mailman/listinfo/icecast >> >> > > > -- > Alejandro Flores L. > LIA. CEH. VCP. > 5513998178 > > _______________________________________________ > Icecast mailing list > Icecast at xiph.org > http://lists.xiph.org/mailman/listinfo/icecast > >-- Victor Moreno Ingeniero Electrónico 3177684646 -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180605/f603e1ed/attachment.html>
On Tue, 5 Jun 2018, Victor Moreno wrote:> I have a problem with the icecast. When I activate the service I am having > an exesive consumption in the ip queries. It seems like a DDOS attack. How > can I mitigate this attack?Why do you think it's a DDOS? What do you see? If it's an option, try running it on another port. HTH, Geoff.
i used this command
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
I've also changed the port and it shows a flood of ips blocking the icecast
2018-06-06 4:36 GMT-05:00 Geoff Shang <geoff at quitelikely.com>:
> On Tue, 5 Jun 2018, Victor Moreno wrote:
>
> I have a problem with the icecast. When I activate the service I am having
>> an exesive consumption in the ip queries. It seems like a DDOS attack.
How
>> can I mitigate this attack?
>>
>
> Why do you think it's a DDOS? What do you see?
>
> If it's an option, try running it on another port.
>
> HTH,
> Geoff.
>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
--
Victor Moreno
Ingeniero Electrónico
3177684646
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20180606/d328de29/attachment.html>