DOS Denail of service AAAAAAAARRRRRRRRRRRGGGGGGGGHHHHHHHHH

Its like adding more and more padlocks and they get bigger and bigger bulldozers

The more holes i plug the bigger the torpedo

OK the short story so far added norton internet security rebuild machine cleanned all malware

stopped the little blighters but now its like i pissed them off

I now get DOS attacks to my

Linksys BEF11S4.v4 wireless router thats hardwired to my machine

the dopuble wammey is that i have voice over ip so when my router goes i have no phone and my wife is expeting any day now

How do i stop / trace the little bastards?????


Very Madaxe

You should get a new router.


I have had some problems with my BEF11S4. You are far better off with the WRT54G.

You are going to have to talk to your ISP about stopping the DoS.

You might want to get a new IP address. see this link Or your ISP might be able to give you another one. In any event, you should report this to your ISP as Dopp said.

I doubt that changing the IP will do anything... according to one of his other posts, he is running a webserver... This generally indicates that he has some sort of DNS service... If there is a static host/domain name, the IP is irrelevant.

Quote:

---

Originally posted here by d0pp
I doubt that changing the IP will do anything... according to one of his other posts, he is running a webserver... This generally indicates that he has some sort of DNS service... If there is a static host/domain name, the IP is irrelevant.

---

Good point Dopp. My bad.

Didnt realize there were 2 threads on this

http://www.antionline.com/showthread...665#post888665

As stated already...contact your isp......maybe they can block it and report it

MLF

OK will contact my ISP

thanks guys linksys were totally incompitant they told me to disable the wifi part of the router to fix


NiCE

Madaxe

Quote:

---

they told me to disable the wifi part of the router

---

Although maybe not related to this scenario, however it's a good security practice to disable any service you don't absolutely need. So if you are hard wired...

cheers

How exactly are the DoS attacks happening? Can you post a some of your logs? There are ways to defend against it, depending on their DoS techniques and type of packets they are using, ICMP etc.

A log extract would be helpfull if you can post one?

Thanks

Yes, but if he institutes protection measures at his end... the pipe is still full and the DoS is still effective.

Quote:

---

the pipe is still full and the DoS is still effective.

---

Not necessarily.... DoS isn't just filling a pipe... ;)

Of course it isn't... But enabling syncookies for example is not going to completely alleviate the effects of a syn flood. You still have to deal with the loss of bandwith. And on what is most likely a 3 meg line at most.... THis could be considerable. SOmeone is obviously after him for some reason.

This is why I suggest talking to the provider. If you can take care of the attack upstream via some sort of filter....

DoS can be caused by a system issue.... It's not all about filling a pipe... a DDoS is but a DoS is a denial of service... There's other ways of denying service than just filling a pipe....

MadAxe, may I suggest you build yourself a Linux gateway and implement IPtables? There are tons of resources and HOWTO's out there that will help you understand the basics. Then there are a plethora of home-grown scripts that allow you to do traffic shaping, QoS, rate-limiting and SYN protection. You could grab any Pentium class machine and add two NIC cards and enable IP forwarding through the IPtables firewall. With this design you will not only have more flexibility on stopping the attacks but you'll learn some kick-ass networking skills too :cool:

The existing hardware can be attached like so:

---- INTERNET -----
|
|
LINUX
FIREWALL
|
|
LINKSYS (RTR / SWITCH / WIFI)
| \
| \
PC PC

Here are some great resources:
- FrozenTux IPTables Tutorial
- Clarke Connect Home Edition (this baby runs off a CD, has Intrusion Prevention, Anti-Spam, VPN, Content Filtering and a Firewall)
- Lutewall is really cool and easy to use too...

Finally, search AntiOnline for some of the members' tutorials on building a firewall as they are very helpful as well.

Hope this helps you in dealing with your problem.