similar to: ddos attack causes high ksoftirqd cpu use

Hi. I have a problem with the icecast. When I activate the service I am having an exesive consumption in the ip queries. It seems like a DDOS attack. How can I mitigate this attack? Thanks. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20180605/bd03e5eb/attachment.htm>

I'm trying to formulate a strategy for our interconnected Asterisk IAX peers to failover to the PSTN in the event of a DDoS. We currently use them like this: DID--->PRI--->Primary Asterisk--->IAX--->On-site Asterisk--->SIP This works fine, and everyone is happy. One of my concerns, though, is if we get DDoS'd - which happens probably once every couple of years. I'd

Dear list, A few days ago one of my machines were attacked by a DDoS-attack using UDP on random ports.. When I later on analyzed the logs, I found this in my dmesg: xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) xl0: initialization of the rx ring failed (55) I tried to find out on google what it ment, but without any luck. What does that mean and

I ask because I only receive attacks when I activate icecast. I can not do anything at the application level ?. i used ubuntu server 16.04. thanks. 2018-06-05 14:52 GMT-05:00 Alejandro Flores <alex at mordormx.net>: > I think you should contact to your connectivity provider, hopefully they > can provide you the Anti DDOS protection. > > > On Tue, Jun 5, 2018 at 2:16 PM,

I know someone who for the past 4 days has been having the heck ddosed out of him. He runs a gaming server, and ran a report on the ddos; he has 8 pages of that and a few hours ago there were 16 pages. They''re attacking his machine on random ports and he blocks UDP traffic on those ports, but they keep attacking on other ports. So far he''s banned over 800,000 IP''s.

Hi, How can I tell shorewall to block any ip address if it generate x no of request within x no of seconds. I want to filter SYN, ICMP and HTTP Get floods etc. Is it possible have a minimum local level deterrence against ddos attacks at firewall level? -- AzfarHashmi Cloudways Your Managed Cloud e: azfar.hashmi@cloudways.com w: www.cloudways.com <http://www.cloudways.com> PGP

Dear Security team, I'm Kamolpat Pornatiwiwat, Sys admin of DMaccess Co., Ltd. I'm got the problem, My FreeBSD 6.0 got Dos attacked. What should I do? At the present, I decide to stop apache and leave only mail feature on functioning. Any guide/recommend/solution will be appreciated. More detail about my server: ====================== FreeBSD 6.0 apache-1.3.34_4 php5-5.1.2_1 MySQL

i used this command netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n I've also changed the port and it shows a flood of ips blocking the icecast 2018-06-06 4:36 GMT-05:00 Geoff Shang <geoff at quitelikely.com>: > On Tue, 5 Jun 2018, Victor Moreno wrote: > > I have a problem with the icecast. When I activate the service I am having >> an

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

Server software firewall cannot help with ddos attacks. Basically if those are indeed ddos attacks you’ll have to look into mitigation solutions which are quite expensive. CloudFlare won’t work as well since they do not support streaming. You should consider getting a server at a data center which provide ddos mitigation, I know that OVH’s mitigation is quite good. בתאריך יום ג׳, 5 ביוני 2018

Send the command output. i installed in other server and it's the same result. 2018-06-06 9:53 GMT-05:00 Alejandro Flores <alex at mordormx.net>: > What's the command output? > > On Wed, Jun 6, 2018, 9:50 AM Victor Moreno <vitjam at gmail.com> wrote: > >> i used this command >> netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c |

well, on a large enough scale, it won't matter even if the server drops them, it will clog the nic way before it even gets to the server.. On Wed, Jun 6, 2018 at 9:40 AM Roman <romeo.r at gmail.com> wrote: > > вт, 5 июн. 2018 г., 23:17 Yahav Shasha <yahav.shasha at gmail.com>: > >> Server software firewall cannot help with ddos attacks. >> > > I

Hi, I have a router running BGP and OSPF (bird) on FreeBSD. Are there any best practises one can take in order to protect the network from DDoS attacks. I know this isn't easy. But I would like to secure my network as much as possible. Even if I'am not able to prevent or block a ddos I would like to get some info (snmp trap parhaps) regarding the attack. Then I can contact my ISP or

Hi After a few days of very fine work, my dom0 went mad. (using xen-3.0.2) It''s ksoftirqd keeps 70% of cpu all the time. Is there anything I can do? Regards, Steffen begin 666 smime.p7s M,( &"2J&2(;W#0$''`J" ,( "`0$Q"S )!@4K#@,"&@4`,( &"2J&2(;W#0$'' M`0``H(())#""`JPP@@(5H ,"`0("`P]Z''3

https://bugzilla.netfilter.org/show_bug.cgi?id=1422 Bug ID: 1422 Summary: iptables-nft fails to check / delete rules in raw table Product: iptables Version: 1.6.x Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: iptables

Hi, I run two live c-class subnets on the internet. Last Sunday morning I was hit with a DDoS attack and it hasn''t stopped. I made modifications on my shorewall firewall during Sunday to lesson the impact, as they were hammering me with 180k/5sec traffic both ways (inbound and outbound). One of the primary things which helped reduce their DDoS was enabling "norfc1918" on the

https://bugzilla.netfilter.org/show_bug.cgi?id=1410 Bug ID: 1410 Summary: STATELESS, rules with notrack into a map Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1213 Bug ID: 1213 Summary: Nft stateless NAT (NOTRACK) Product: nftables Version: unspecified Hardware: All OS: Ubuntu Status: NEW Severity: critical Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter:

Hi, I''m getting some excessive looking CPU time for ksoftirqd (on CPU0) when running Xen on a Hyperthreaded P4 3Ghz. Any one else seeing this?... [root@localhost ~]# top top - 21:35:23 up 1 day, 12:18, 3 users, load average: 0.06, 0.02, 0.00 Tasks: 53 total, 1 running, 52 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0% us, 0.5% sy, 0.0% ni, 86.0% id, 0.0% wa, 13.5% hi, 0.0% si

I am trying to understand why Mongrel so forcefully disables http pipelining. The docs say because the spec is unclear, and it hurts performance. These reasons smell... wrong. The HTTP spec is pretty clear, and, er, I cannot find anywhere else that claims there is a performance drawback, and lots of studies (and personal benchmarks across years of writing webapps) showing how much it