8 votes
Accepted

What prevents unsolicited internet packets from using up my monthly data limit?

My home router can use port-forwarding to act as a server, so I assume all internet packets sent with my public IP address as a destination are hitting it (and just not getting any response from my ...
u1686_grawity's user avatar
5 votes
Accepted

Does Transmission Bittorrent client use UDP?

Yes, Transmission uses both TCP (standard BitTorrent) and UDP (BitTorrent over µTP).
u1686_grawity's user avatar
3 votes

Ping-attack on a server?

It would probably not take down the server because answering a ping (technically, an ICMP Echo Request) consumes very little resources. But it could saturate the server's network connection, crowding ...
Tilman Schmidt's user avatar
2 votes

Implementing fail2ban the correct way

You should look at those two modules of nginx: http://nginx.org/en/docs/http/ngx_http_limit_req_module.html http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html This helps you limiting the ...
unNamed's user avatar
  • 654
2 votes

Being ddos-ed or my VPS has been compromised?

While you can't gain a lot of information from the output of iftop, that server is connecting to a number of mail servers. If you're not expecting to be sending emails, then the server is compromised ...
djsmiley2kStaysInside's user avatar
2 votes

limit max UDP bandwidth per IP using iptables?

What you are trying to do will not prevent DDos attacks, instead it will limit the bandwidth, that means low network performance, so i suggest you to limit the number of UDP received packets per ...
Reda Salih's user avatar
2 votes

What happens if the router is ddosed?

Each incoming packet on any network device consumes resources. What happens when those resources run out depend heavily on the router, whether the packets are part of a connection the router is also ...
LawrenceC's user avatar
  • 73.9k
2 votes
Accepted

How virtual machines will be effected from DDoS attack on same physical server?

A virtual machine shares the physical network card with the other virtual machines on the physical machine. So if a DDoS attack is powerful enough the overwhelm the capacity of the network card it ...
Jacob2471's user avatar
1 vote
Accepted

Adding an exception to DoS protection settings of my router

Just disable it. The router on the receiving end has no means to prevent packets from being delivered to it, so this kind of "Flood" protection is only useful if implemented in front of the ...
u1686_grawity's user avatar
1 vote

How to access a site with shared IP using IP address (and sub-folders? URL?)

Yes, if you put entries into your hosts file and had host resolution set to files before DNS. But first - where'd you get that IP? You would be opening your wiki to attack if it's not the correct one. ...
betsys's user avatar
  • 11
1 vote
Accepted

Ping-attack on a server?

Yes. This type of attack is known as a "ping flood". From a CloudFlare page about them: What is a Ping (ICMP) flood attack? A ping flood is a denial-of-service attack in which the attacker ...
Gordon Davisson's user avatar
1 vote
Accepted

Block requests in lighttpd made with HTTP/1.0 and only allow HTTP/1.1

Instead of giving a solution for lighttpd, I would recommend you to use fail2ban that is present on all Unix based system. It is watching for changes in log files and parses it according to regular ...
Alex's user avatar
  • 6,227
1 vote

What happens to your connection / modem when you are DDoSed and how can you prevent it?

There are some steps you can try to mitigate this situation. Unplug the modem router, download new firmware for the two on your phone if you need to. When you plug your modem and router back in, you ...
Tim_Stewart's user avatar
  • 5,969
1 vote
Accepted

What happens to your connection / modem when you are DDoSed and how can you prevent it?

From the outside, only your public IP address is visible. A DDoS is sent to this public IP, which is your modem. If your modem passes this to the router, your router then has to decide if it sends ...
LPChip's user avatar
  • 61.1k
1 vote

How to generate normal web traffic for DDoS Testbed to compute the false positive rate?

You can setup a PC in LAN to simulate multiple IP and MAC to simulate DDoS. It seems somebody already wrote the answer in serverfault. (I can't guarantee all those tools will works). A local area ...
mootmoot's user avatar
  • 111
1 vote
Accepted

TP-Link DoS protection blocks Bonjour

The problem was the "Blat Attack" filter. A Blat Attack is a specialization of a "Land Attack", but somehow the filter evolved only to check for the specialization, not the full blown attack. In ...
Old Pro's user avatar
  • 2,493
1 vote

Designing a custom small DDoS detection and defense sytem

Wireshark is the 'go-to' tool for network sniffing. Wireshark; Beyond this, you're pretty much left teaching yourself about info sec. You'd likely do better by reading up at https://security....
djsmiley2kStaysInside's user avatar
1 vote

Simple ICMP DoS attack example with cmd on Windows 10 crashing the attacker's computer?

:A start ping.bat goto A This code would flood the attacking computer with CMD tabs until the attacking computer's CPU would crash under stress with so many processes being created and running. More ...
iNot's user avatar
  • 11
1 vote

Invalid URI in request and apache stopps working

I would consider Upgrading to Apache webserver latest version (2.4.18 at time of writing) Reviewing security-related settings Use of modules such as mod_security See Secure Your Apache With ...
RedGrittyBrick's user avatar
1 vote

How virtual machines will be effected from DDoS attack on same physical server?

DDOS attack is a very broad term. There are many different forms of DDOS attacks. TCP Connection Attacks - Occupying connections Volumetric Attacks - Using up bandwidth Fragmentation Attacks - ...
Setekh's user avatar
  • 502

Only top scored, non community-wiki answers of a minimum length are eligible