Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I host a GameServer and some stupid guy just keeps attacking my Application server with random queries. I have found a solution to block it but he uses different kinds of queries so I have to block the new ones almost daily using iptables. I bought a test VPS to try and change those flood strings and attack my Dedi just to be sure if everything is now safe because I can't wait for him to attack everyday.

Now the thing is, he uses multiple spoofed IPs in the attack. While my test tool can do it, it looks like some Networking issues not letting it happen. Lets say the target IP is and it has to be attacked by while will be the IP that will be used for generating the attack from to

Now I do see on the machine using iftop that is flooding but no such attack appears entering the machine. The script for the application flood is the same being used by the attacker and on asking the developer of the script, he says you have to directly be connected to the internet without a firewall/nat/ router.

I'm not good in Networking so I'd like to ask how can we achieve it. Aren't the VPS machines already directly connected, if not how can we get such a machine cheaply for testing?

share|improve this question
up vote 2 down vote accepted

It would make more sense to start throttling connections to your application in my opinion, if iptables are an option this: provides the required information.

share|improve this answer
Well actually I've researched a lot on the issue and I've already come to a perfect iptables solution in my case. But I just need some testing against it for which I need to generate a multiple IP Spoofed attack. – Asad Moeen Mar 19 '12 at 12:57
@AsadMoeen a scripting startup of multiple cloud instances may well be the way to go in this case, just ensure you have full legal sign off between yourself and your provider for carrying out the test to avoid any backlash. – Oneiroi Mar 22 '12 at 15:58
So you basically a mean a Network level startup script before everything to do so? How should I do so? – Asad Moeen Mar 24 '12 at 7:01
@AsadMoeen yes I could and no I wouldn't attack anything without prior legal sign off from all relevant parties, and I would advise you on the same. – Oneiroi Jul 9 '12 at 20:26
And when you own both the "to" and "from" servers, legalization isn't a problem right? – Asad Moeen Jul 10 '12 at 14:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.