8
votes
Accepted
What prevents unsolicited internet packets from using up my monthly data limit?
My home router can use port-forwarding to act as a server, so I assume all internet packets sent with my public IP address as a destination are hitting it (and just not getting any response from my ...
5
votes
Accepted
Does Transmission Bittorrent client use UDP?
Yes, Transmission uses both TCP (standard BitTorrent) and UDP (BitTorrent over µTP).
3
votes
Ping-attack on a server?
It would probably not take down the server because answering a ping (technically, an ICMP Echo Request) consumes very little resources. But it could saturate the server's network connection, crowding ...
2
votes
Implementing fail2ban the correct way
You should look at those two modules of nginx:
http://nginx.org/en/docs/http/ngx_http_limit_req_module.html
http://nginx.org/en/docs/http/ngx_http_limit_conn_module.html
This helps you limiting the ...
2
votes
Being ddos-ed or my VPS has been compromised?
While you can't gain a lot of information from the output of iftop, that server is connecting to a number of mail servers.
If you're not expecting to be sending emails, then the server is compromised ...
2
votes
limit max UDP bandwidth per IP using iptables?
What you are trying to do will not prevent DDos attacks, instead it will limit the bandwidth, that means low network performance, so i suggest you to limit the number of UDP received packets per ...
2
votes
What happens if the router is ddosed?
Each incoming packet on any network device consumes resources. What happens when those resources run out depend heavily on the router, whether the packets are part of a connection the router is also ...
2
votes
Accepted
How virtual machines will be effected from DDoS attack on same physical server?
A virtual machine shares the physical network card with the other virtual machines on the physical machine. So if a DDoS attack is powerful enough the overwhelm the capacity of the network card it ...
1
vote
Accepted
Adding an exception to DoS protection settings of my router
Just disable it.
The router on the receiving end has no means to prevent packets from being delivered to it, so this kind of "Flood" protection is only useful if implemented in front of the ...
1
vote
How to access a site with shared IP using IP address (and sub-folders? URL?)
Yes, if you put entries into your hosts file and had host resolution set to files before DNS.
But first - where'd you get that IP? You would be opening your wiki to attack if it's not the correct one.
...
1
vote
Accepted
Ping-attack on a server?
Yes. This type of attack is known as a "ping flood". From a CloudFlare page about them:
What is a Ping (ICMP) flood attack?
A ping flood is a denial-of-service attack in which the attacker ...
1
vote
Accepted
Block requests in lighttpd made with HTTP/1.0 and only allow HTTP/1.1
Instead of giving a solution for lighttpd, I would recommend you to use fail2ban that is present on all Unix based system. It is watching for changes in log files and parses it according to regular ...
1
vote
What happens to your connection / modem when you are DDoSed and how can you prevent it?
There are some steps you can try to mitigate this situation.
Unplug the modem router, download new firmware for the two on your phone if you need to. When you plug your modem and router back in, you ...
1
vote
Accepted
What happens to your connection / modem when you are DDoSed and how can you prevent it?
From the outside, only your public IP address is visible. A DDoS is sent to this public IP, which is your modem. If your modem passes this to the router, your router then has to decide if it sends ...
1
vote
How to generate normal web traffic for DDoS Testbed to compute the false positive rate?
You can setup a PC in LAN to simulate multiple IP and MAC to simulate DDoS.
It seems somebody already wrote the answer in serverfault. (I can't guarantee all those tools will works).
A local area ...
1
vote
Accepted
TP-Link DoS protection blocks Bonjour
The problem was the "Blat Attack" filter. A Blat Attack is a specialization of a "Land Attack", but somehow the filter evolved only to check for the specialization, not the full blown attack. In ...
1
vote
Designing a custom small DDoS detection and defense sytem
Wireshark is the 'go-to' tool for network sniffing.
Wireshark;
Beyond this, you're pretty much left teaching yourself about info sec. You'd likely do better by reading up at https://security....
1
vote
Simple ICMP DoS attack example with cmd on Windows 10 crashing the attacker's computer?
:A
start ping.bat
goto A
This code would flood the attacking computer with CMD tabs until the attacking computer's CPU would crash under stress with so many processes being created and running. More ...
1
vote
Invalid URI in request and apache stopps working
I would consider
Upgrading to Apache webserver latest version (2.4.18 at time of writing)
Reviewing security-related settings
Use of modules such as mod_security
See Secure Your Apache With ...
1
vote
How virtual machines will be effected from DDoS attack on same physical server?
DDOS attack is a very broad term. There are many different forms of DDOS attacks.
TCP Connection Attacks - Occupying connections
Volumetric Attacks - Using up bandwidth
Fragmentation Attacks - ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
denial-of-service × 88networking × 27
security × 16
linux × 15
router × 10
firewall × 8
iptables × 8
ip × 6
ubuntu × 4
wireless-networking × 4
apache-http-server × 4
ping × 4
ssh × 3
vpn × 3
dns × 3
internet × 3
webserver × 3
tcp × 3
bash × 2
debian × 2
email × 2
virtual-machine × 2
shell × 2
proxy × 2
wireless-router × 2