A denial-of-service (DoS) attack is an attempt to deny service to legitimate users by sending extreme amounts of requests to a server.

learn more… | top users | synonyms (1)

0
votes
2answers
736 views

CSF/LFD - would I really need CPHulk enabled also?

So if I have the default configuration of CSF/LFD firewall running, should I enable CPHulk, or does CSF/LFD already do what CPHulk does? If the answer is "No, CSF/LFD does not do what CPHulk does", ...
0
votes
1answer
22 views

DDoS/botnet or what's going on, cloudflare.com?

This is small output from tcpdump -i re1 'port 25': 14:00:10.732034 IP cf-190-93-254-113.cloudflare.com.http > MY_IP.smtp: S 4234708404:4234708404(0) win 8192 <mss 1412,nop,wscale ...
0
votes
1answer
39 views

DDOS on port 443?

Recently my friend asked me whether his network is secure because he is setting up a game server on port XXX. I opened up Nmap on my linux machine and found port 443 opened. I tried to access ...
0
votes
1answer
148 views

Compromised Debian server sending DDOS attack

I have a server online that apparently has been compromised and it sends DDOS attacks to another ip. The system is a debian 7 server, hosting a few wordpress, joomla websites, and airtime to host a ...
0
votes
1answer
80 views

Can Torrent/DHT network remember my IP?

I suspect that my torrent activity casted some sort of "natural" DDOS attack on me. I had UPnP configured and each time I was starting uTorrent client, it was generating new random port and was ...
0
votes
1answer
247 views

Measure DDOS attack strength

I have been puzzled on this theory. Assume Server B is sending DDOS attack to Server A, so is it possible for a random client A, to be able to measure the attack strength, like the client A was able ...
0
votes
1answer
755 views

Logging incoming IP addresses on a specific port

I've tried tcpflow and iptables but I'm unable to do so. I believe someone is attempting to DDOS my open port which is a server, so that my clients are unable to connect. From tcpflow I'm able to get ...
0
votes
1answer
242 views

MacBook Air gets added to Watchguard XTM-21W Appliance's Blocked Site List?

We have this issue where one of our MacBook Air (Mountain Lion) users is periodically getting added to the Blocked Sites list within our Watchguard XTM-21 Appliance (XTM21-W). Couple of questions: ...
-2
votes
1answer
50 views

Protected from attacks through Skype

I know that people can find your IP through Skype and try to DDOS it and take your Internet down for a couple of minutes or hours. What I would like to know is: How many people need to DDOS you at ...
2
votes
0answers
50 views

How to mitigate IP fragmentation attacks before reassembly when authentication information is available?

I'm trying to filter incoming traffic to high bandwidth, low latency network, to mitigate DDOS. The incoming traffic is custom UDP (I'm setting the protocol specs so I can force IP headers if ...
1
vote
0answers
33 views

A lot of random NAT tables appear

My brothers Mac seems to be infected. It keeps on sending UDP and SYN floods to our router, and it multiplies my ping 10 times.When I look in the NAT Mapping table there are a lot of random address ...
1
vote
0answers
54 views

Block packets by size in Windows

currently I am receiving an attack against one of my services running on Windows Server 2008 R2 with malicious UDP packets all of a specific length. I have tried dropping these packets with a plugin ...
1
vote
0answers
287 views

Firewall best practice

I have to implement a firewall on a Mikrotik RouterBoard. What is a good way to do it? Here is my plan: Note: We are using an OpenVPN (bridge mode) server, a DHCP server, a PPPOE client, and an NTP ...
1
vote
0answers
392 views

How to get rid of DOS attack: RST Scan?

I have Netgear Wnr1000v2 router. I have set my NAT to secure mode ( I don't know if that helps ). Many a times when I see my router's log I see lots of DOS attack: RST Scan. I somehow think that these ...
0
votes
0answers
41 views

Configure Router for better DDoS protection Actiontec MI424WR

So for the past month, my server has been attacked by script-kiddies three times. The server is mainly used as a minecraft server. I am getting worried that this is becoming an outbreak as many of ...
0
votes
0answers
566 views

Linux message: Possible SYN flooding on port 25. Sending cookies

I have a Linux CentOS server online. At my console this message appeared: possible possible SYN flooding on port 25. Sending cookies. See SYN flood and SYN cookies. I have done an Apache JMeter ...