-1
votes
1answer
11 views

ddos mitigation , traffic spike

since last week we are having a traffic spike that take down our server, in our traffic stats we see this at the time of the attack Current Out: 98.2 Mb/s (98.2%) the server gets down so i can't ...
2
votes
1answer
163 views

SynFlood attack, spoofed IPs, syncookies mitigation

Due to a recent increase in SynFlood attacks on my company's systems i've been testing by Syn flooding the hosts myself to see how easy they are to disrupt, and the answer is 'quite easy'. By using a ...
2
votes
2answers
77 views

Will MX records with a longer TTL help mitigate effects of DoS attack?

We have our email hosted at Google Apps, and have our DNS servers for the domain setup at Namecheap. About a month ago our website went down (not a big deal, since it's most just a contact info ...
4
votes
1answer
184 views

Windows server 2008, a very small DDoS is able to kill my server

So I have this i7 3.2Ghz 6-core dedicated server running Windows Server 2008, with a 1Gbps internet speed. Everything runs fine and nice, and the machine is strong enough to handle even up to 700 ...
0
votes
2answers
228 views

netfilter ip_conntrack and (d)DoS

Does using netfilter.ip_conntrack in the kernel in anyway help mitigate (d)DoS attacks or does it make it worse? I know it adds the ability to track connections and such but just curious if it helps ...
0
votes
1answer
843 views

Best Practice for captcha based protection against D.O.S to Nginx Proxy

The idea is explained here In simple words, Nginx Proxy plays the role of load balance and transmits the HTTP/HTTPS requests to servers. If the number of request times within a certain period from ...
0
votes
2answers
428 views

Prevent scanning of the Apache's /default directory

I have two directories, under /var/www/vhosts: mydomain/ and default/. Files in default directory can be accessed using IP address of our server. I have checked Apache log and somebody is ...
1
vote
1answer
398 views

Logging UDP flood DDOS attacks? [closed]

How do I log UDP flood DDOS attacks? Right now I am thinking about detecting if the server is receiving more than X megabytes per second for Y seconds, and then doing trafshow > logs.txt as root ...
1
vote
5answers
2k views

SMTP DOS attacks with malformed email addresses

We have the following setup: Redhat kernel 2.4.16 Sendmail 8.11.6 This is a very old, ~7 years, cobalt RaQ server and is not easily upgradeable. Currently, we are being hit by multiple IP addresses ...