search for: ddos

I'm trying to formulate a strategy for our interconnected Asterisk IAX peers to failover to the PSTN in the event of a DDoS. We currently use them like this: DID--->PRI--->Primary Asterisk--->IAX--->On-site Asterisk--->SIP This works fine, and everyone is happy. One of my concerns, though, is if we get DDoS'd - which happens probably once every couple of years. I'd like to have the dialplan fail...

Hi. I have a problem with the icecast. When I activate the service I am having an exesive consumption in the ip queries. It seems like a DDOS attack. How can I mitigate this attack? Thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180605/bd03e5eb/attachment.htm>

Dear list, A few days ago one of my machines were attacked by a DDoS-attack using UDP on random ports.. When I later on analyzed the logs, I found this in my dmesg: xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) I tried to find out on google what it ment, but without any...

...cks when I activate icecast. I can not do anything at the application level ?. i used ubuntu server 16.04. thanks. 2018-06-05 14:52 GMT-05:00 Alejandro Flores <alex at mordormx.net>: > I think you should contact to your connectivity provider, hopefully they > can provide you the Anti DDOS protection. > > > On Tue, Jun 5, 2018 at 2:16 PM, Victor Moreno <vitjam at gmail.com> wrote: > >> Hi. >> >> I have a problem with the icecast. When I activate the service I am >> having an exesive consumption in the ip queries. It seems like a DDOS >>...

Server software firewall cannot help with ddos attacks. Basically if those are indeed ddos attacks you’ll have to look into mitigation solutions which are quite expensive. CloudFlare won’t work as well since they do not support streaming. You should consider getting a server at a data center which provide ddos mitigation, I know that OVH’s miti...

Hi, How can I tell shorewall to block any ip address if it generate x no of request within x no of seconds. I want to filter SYN, ICMP and HTTP Get floods etc. Is it possible have a minimum local level deterrence against ddos attacks at firewall level? -- AzfarHashmi Cloudways Your Managed Cloud e: azfar.hashmi@cloudways.com w: www.cloudways.com <http://www.cloudways.com> PGP keyid: 0xF42034B0F915D729 http://keyserver.pgp.com --------------------------------------------------------------------...

I know someone who for the past 4 days has been having the heck ddosed out of him. He runs a gaming server, and ran a report on the ddos; he has 8 pages of that and a few hours ago there were 16 pages. They''re attacking his machine on random ports and he blocks UDP traffic on those ports, but they keep attacking on other ports. So far he''s bann...

...t. I can not do > anything at the application level ?. i used ubuntu server 16.04. thanks. > > 2018-06-05 14:52 GMT-05:00 Alejandro Flores <alex at mordormx.net>: > >> I think you should contact to your connectivity provider, hopefully they >> can provide you the Anti DDOS protection. >> >> >> On Tue, Jun 5, 2018 at 2:16 PM, Victor Moreno <vitjam at gmail.com> wrote: >> >>> Hi. >>> >>> I have a problem with the icecast. When I activate the service I am >>> having an exesive consumption in the ip querie...

...the server drops them, it will clog the nic way before it even gets to the server.. On Wed, Jun 6, 2018 at 9:40 AM Roman <romeo.r at gmail.com> wrote: > > вт, 5 июн. 2018 г., 23:17 Yahav Shasha <yahav.shasha at gmail.com>: > >> Server software firewall cannot help with ddos attacks. >> > > I wouldn't say that. If is about tcp syn or connect type of an attack, > than those iptables rules + syn cookies in sysctl would help much. If it is > kind of a udp flood than yes, you are right, nothing will help much, only > services like cloudlare, but th...

...f ips blocking the icecast 2018-06-06 4:36 GMT-05:00 Geoff Shang <geoff at quitelikely.com>: > On Tue, 5 Jun 2018, Victor Moreno wrote: > > I have a problem with the icecast. When I activate the service I am having >> an exesive consumption in the ip queries. It seems like a DDOS attack. How >> can I mitigate this attack? >> > > Why do you think it's a DDOS? What do you see? > > If it's an option, try running it on another port. > > HTH, > Geoff. > > > _______________________________________________ > Icecast mailing lis...

Hello List! I got a small (50mbits or so) application layer ddos attack against a few name servers (thousands of IPs sending lots of bogus A record requests - weird) - one of the name servers was behind a shorewall firewall. That firewall was running a 2.6.18-194.11.1.el5 kernel and shorewall-4.4.11.1-1. I noticed that the shorewall host had ksoftirqd usi...

...off Shang <geoff at quitelikely.com>: >> >>> On Tue, 5 Jun 2018, Victor Moreno wrote: >>> >>> I have a problem with the icecast. When I activate the service I am >>>> having >>>> an exesive consumption in the ip queries. It seems like a DDOS attack. >>>> How >>>> can I mitigate this attack? >>>> >>> >>> Why do you think it's a DDOS? What do you see? >>> >>> If it's an option, try running it on another port. >>> >>> HTH, >>> Geoff...

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s...

Dear Security team, I'm Kamolpat Pornatiwiwat, Sys admin of DMaccess Co., Ltd. I'm got the problem, My FreeBSD 6.0 got Dos attacked. What should I do? At the present, I decide to stop apache and leave only mail feature on functioning. Any guide/recommend/solution will be appreciated. More detail about my server: ====================== FreeBSD 6.0 apache-1.3.34_4 php5-5.1.2_1 MySQL

...off Shang <geoff at quitelikely.com>: >> >>> On Tue, 5 Jun 2018, Victor Moreno wrote: >>> >>> I have a problem with the icecast. When I activate the service I am >>>> having >>>> an exesive consumption in the ip queries. It seems like a DDOS attack. >>>> How >>>> can I mitigate this attack? >>>> >>> >>> Why do you think it's a DDOS? What do you see? >>> >>> If it's an option, try running it on another port. >>> >>> HTH, >>> Geoff...

...at password is already in use.? > > The new rules are nowhere near that stringent: > > http://manpages.ubuntu.com/manpages/trusty/man8/pam_pwquality.8.html > >> Who thinks the password policy in my machines are my concern. > > Much of the evil on the Internet today ? DDoS armies, spam spewers, phishing botnets ? is done on pnwed hardware, much of which was compromised by previous botnets banging on weak SSH passwords. > > Your freedom to use any password you like stops at the point where exercising that freedom creates a risk to other people?s machines. >...

https://bugzilla.mindrot.org/show_bug.cgi?id=3211 Bug ID: 3211 Summary: A Product: Portable OpenSSH Version: 8.3p1 Hardware: Other OS: Linux Status: NEW Severity: security Priority: P5 Component: sshd Assignee: unassigned-bugs at mindrot.org Reporter: kircherlike at

Hi, I dont think you can deny all ddos against your box, you will need help from your isp. That is because if a person sends you enough packets, like 1mbit (and your line is 1mbit) full of packets, your connection is stuck, whether you filter or not. Though you can mitigate those by closing all non needed ports, log them if any attempt...

Hi, I have a router running BGP and OSPF (bird) on FreeBSD. Are there any best practises one can take in order to protect the network from DDoS attacks. I know this isn't easy. But I would like to secure my network as much as possible. Even if I'am not able to prevent or block a ddos I would like to get some info (snmp trap parhaps) regarding the attack. Then I can contact my ISP or install an ACL on my router. Any help would be g...

...8, 2015, at 4:37 PM, Nathan Duehr <denverpilot at me.com> wrote: >> >>> On Jul 28, 2015, at 11:27, Warren Young <wyml at etr-usa.com> wrote: >>> >>> So no, your local password quality policy is not purely your own concern. >> >> Other than DDoS which is a problem of engineering design of how the network operates (untrusted anything can talk to untrusted anything) > > I?m not sure how you mean that comment. > > If you?re saying that the Internet is badly designed and that we need to rip it up and replace it before we can addr...