[Solved]Server down? STOP! Read this first.
#98
STOPPING DDOS!,
Yes, it is possible. It's not easy to block, either, since an attacker can forge the source IP to be one of almost four billion IPs. However, a lot of attacks such as this can be filtered by examining the DNS data inside the datagram. A lot of flood attacks either use invalid data or use the same data over and over again. This can be used to differentiate the valid traffic from invalid traffic if you have network equipment capable of deep packet inspection. The attack will still use quite a bit of your bandwidth, but you can at least keep it from overloading your nameserver. Normally, though, the nameserver itself is not the target for these sorts of attacks. Instead of using a random source IP, the source IP is set to that of the real target: a DNS reflection attack. Very short questions resulting in long answers are sent to the nameserver, and the nameserver sends the answer to the target IP address, flooding it with traffic. This is easier to filter on the nameserver side since it appears as a single source since it is so targeted.
The following 1 user Likes Gandhi's post:
  • Glade


Messages In This Thread
RE: Server down? STOP! Read this first. - by Qiix - 05-27-2012, 04:18 AM
RE: Server down? STOP! Read this first. - by Qiix - 06-02-2012, 09:58 PM
RE: Server down? STOP! Read this first. - by Xing - 06-16-2012, 10:25 AM
RE: Server down? STOP! Read this first. - by 001 - 06-21-2012, 07:15 PM
RE: Server down? STOP! Read this first. - by Frel - 06-29-2012, 12:01 AM
RE: Server down? STOP! Read this first. - by Nuka - 11-13-2012, 05:02 PM
RE: Server down? STOP! Read this first. - by Nuka - 11-13-2012, 05:10 PM
RE: Server down? STOP! Read this first. - by Narc - 03-07-2013, 10:11 AM
RE: Server down? STOP! Read this first. - by tomtom56783 - 08-25-2013, 07:49 PM
RE: Server down? STOP! Read this first. - by Narc - 08-25-2013, 08:05 PM
RE: Server down? STOP! Read this first. - by Gandhi - 09-02-2013, 03:45 PM
RE: Server down? STOP! Read this first. - by Narc - 10-11-2013, 01:20 PM
RE: Server down? STOP! Read this first. - by Narc - 10-11-2013, 02:29 PM
RE: Server down? STOP! Read this first. - by Narc - 10-11-2013, 04:43 PM
RE: Server down? STOP! Read this first. - by User 12049 - 10-11-2013, 04:46 PM
RE: Server down? STOP! Read this first. - by User 12049 - 10-11-2013, 08:20 PM
RE: Server down? STOP! Read this first. - by User 12049 - 10-11-2013, 08:25 PM
RE: Server down? STOP! Read this first. - by Narc - 10-13-2013, 11:19 PM
RE: Server down? STOP! Read this first. - by Jan - 06-27-2016, 12:35 PM
RE: Server down? STOP! Read this first. - by Create - 06-27-2016, 02:03 PM
RE: Server down? STOP! Read this first. - by cnr - 06-27-2016, 02:19 PM
RE: Server down? STOP! Read this first. - by max. - 01-11-2021, 10:40 AM

Forum Jump:


Users browsing this thread: 2 Guest(s)