Hmm, i would say that IP blocking is very hard in this situation. How many of you here have actually seen the logfiles of a DoS attack? Every hit comes from another IP, and NON of them is actually from the attacker. Its a bunch of zombies. DoS bots attacks in order to be succesfull need atleast 50 infected hosts... and a normal amount of zombies can reach upto 1000 infected systems. We have had same issues a long time ago.... all we could do is wait till the skiddies got bored.........

The other thing you have todo, patch everything that needs patching, and make sure your firewall is configured correctly. Not that it will do a BIG difference, but it might if the attackers have a smaller amount of DoS bots at hand.

[note] It doesnt have to be DoS bots... but for skiddies, its 80% likely that it is (SGBOTS) [/note]

Cheers.


--edit /addon

Nowadays, its not easy for irc users to use dos bots on public irc servers without the knowledge of the irc admins.... that means that the irc admins are in on it (friends with the attackers), or they use a hidden private ircd to load the bots too.

Cheers.