1

I want to stop the UDP flooding on the Linux device.

I have written a simple IPTable rule to drop all UDP packets

iptables -A INPUT -p udp DROP

But still the DoS attack happens and the device gets hanged. Any clue on how to prevent a UDP flooding?

Every Answer is appreciated.

  • Your upstream provider. iptables is still handling the traffic and if it can't cope it'll still hang. – Nathan C Jun 18 '13 at 14:27
  • Still the same rate of TCP packet flooding is managed effectively by the same device. Why not UDP? – buddy Jun 18 '13 at 14:39
  • UDP floods tend to be much larger because there's no handshake overhead involved. You can easily have these floods stopped at an upstream router that just filters UDP. Are you sure it's just not saturating your bandwidth? If it is, not much you can do anyway. – Nathan C Jun 18 '13 at 14:41
2

Block the traffic at an upstream router. You can't make those packets magically disappear, so if your device is so underpowered that it can't handle dropping UDP packets, you'll need to do that with another device.

  • Its expected the device to be of standalone and still manage a UDP flooding? Is it possible some way? – buddy Jun 18 '13 at 14:37
  • You described how do to it in your original question. – gparent Jun 18 '13 at 14:41
  • Also the TCP flooding is managed by it effectively, in UDP flooding alone it fails? What can be the difference? – buddy Jun 18 '13 at 14:42
  • You would use -p tcp for TCP and -p udp for UDP. But it's the same rule. – gparent Jun 18 '13 at 14:44
  • Yes i'm using the rule -p udp , But with lower rate of UDP flooding is managed effectively now with the same rule. Still the question is - the UDP flooding at the same rate as TCP flooding is faster than TCP? – buddy Jun 18 '13 at 14:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.