Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Possible Duplicate:
What are the best techniques for preventing denial of service attacks?

What do you suggest?

Being UDP flooded as I write to multiple servers in different data centers in 5 different countries . Up to 250,000 packets a second. I believe Cisco routers 5505 would not handle that - (some of our datacenter hosters can offer them. Some have no firewalls to offer.) Our clients naturally have constant disconnects to the server they are on. Hacker started this about three weeks ago. Sometimes for a few hours - up to a few days.

If we can't stop it hitting the server with firewalls then how do we stop the hacker - now there is the challenge!

Update : Found some of the data centers offer up to 10 firewall rules but would their routers be able to handle the possible volume I am talking about?

Thanks Chris

share|improve this question

marked as duplicate by EEAA, Michael Hampton, Ward, Scott Pack, HopelessN00b Sep 25 '12 at 1:05

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

You need to get your ISP to drop this traffic on the backbone before it even hits your firewall/router. Once it's there, it's already consuming resources. Sure, you don't respond to requests if you block it at the firewall, but the rejected requests are still chewing up bandwidth.

share|improve this answer
    
Thanks for your comments MDMarra. We don't believe however that any of the server companies will agree to drop this traffic on the backbone. –  Chris Gurney Sep 23 '12 at 8:45
    
Then you need a new ISP. –  MDMarra Sep 23 '12 at 12:34

Not the answer you're looking for? Browse other questions tagged or ask your own question.