  |
 This is for Doc - Help! |
 Dec 27 2007, 08:08 PM
Post
#1
|
|
 Newbie Group: Members Posts: 6 Joined: 17-January 07 Member No.: 47,011  |
My box keeps getting dos attacked between the hours of 8 and 12 PM EST every day. All I have for protection is windows firewall, which blocks out everything except traffic on 3 or 4 ports. My box runs the application Counter-Strike: Source and the dos attack destination (according to support) is the port 27015, the same port the game server runs on. I have 3 css instances running on the box, but only one suffers from the 90-100 % consumption of my 100mbit port.
Any suggestions? -------------------- |
 |
 
|
|
Dec 27 2007, 08:59 PM
Post
#2
|
|
|
SuperGeek  Group: Admin Posts: 1,441 Joined: 31-August 01 From: Houston, TX Member No.: 234 |
Is the attack from a single source or is it a ddos?
-------------------- Thank you,
Aaron Conklin Product Manager |
|
|
|
|
Dec 27 2007, 11:29 PM
Post
#3
|
|
 SuperGeek  Group: Members Posts: 2,194 Joined: 27-May 05 From: Louisiana Member No.: 43,096 |
You need to contact support so they can null route the inciting IP address. Unfortunately I can not help you much with this one.
Good luck. 
-------------------- |
|
|
|
|
Jan 7 2008, 02:59 AM
Post
#4
|
|
 Computer Chip Group: Members Posts: 848 Joined: 4-February 04 From: the next cube over Member No.: 39,487 |
If it is a single IP doing the attack you can create an IPSec policy to block and add the IP there. Then if any additional bad ips pop up you can simply add them to your block list. You can also block an entire subnet if you like.
I had a problem with someone crashing a game server on purpose a while back and this worked great. He can't even ping any of the IPs on the server machine at all because he's blocked 
-------------------- well i live in the netherlands, what do you think the ping would be??
http://www.jesus-is-savior.com/Basics/howtobesaved.htm http://www.desktop-engineer.net |
|
|
|
|
Jan 7 2008, 07:08 PM
Post
#5
|
|
|
Computer Chip Group: Members Posts: 810 Joined: 19-July 05 Member No.: 43,347 |
IPSEC works well when configured properly.
The downside, the attacks are still using bandwidth. |
|
|
|
|
Jan 7 2008, 10:29 PM
Post
#6
|
|
|
SuperGeek Group: Members Posts: 2,194 Joined: 27-May 05 From: Louisiana Member No.: 43,096 |
Yep. The goal is to stop the traffic at the router, not at the server level. If the traffic continues to the server it will eat up all of your network connection.
-------------------- |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 2nd September 2010 - 09:46 AM |