Blaquicat 2016 年 3 月 17 日 下午 5:06
Help with a Humax HG100R-L2 and DDoS
Hello there!

First of all, sorry about my poor english..

I have a left 4 dead 2 server, on an linux debian, and this Humax Cable Modem, i have 15/2 (mbps) of internet speed (band).
Someone is chasing me on the game, every time i join my own server i got DDoSed, at first i thought the attack overflow my internet conection, and making it drop.

After some testing, i realize that the attack barely reaches 1mbps, even so, my cable modem cant handle it.

It has a firewall on it, but i have to set it to low protection, otherwise it will "close" the door of the game (game port is 25594)

Anyone with knowledge on this piece of shi.. hardware, or any other ideia about the matter is very welcome..

Thanks!
最後修改者:Blaquicat; 2016 年 3 月 17 日 下午 5:07
< >
目前顯示第 1-4 則留言,共 4
[☥] - CJ - 2016 年 3 月 17 日 下午 6:12 
Even a firewall wont help you if the attack is higher than your bandwidth.
Theres really nothing you can do if someone is knocking you off for some reason.

You can change your IP, but if the person is on your friends list or checking your profile they can just get the IP again when you run the server.
最後修改者:[☥] - CJ -; 2016 年 3 月 17 日 下午 6:13
Blaquicat 2016 年 3 月 17 日 下午 6:55 
引用自 ☥ - CJ -
Even a firewall wont help you if the attack is higher than your bandwidth.
Theres really nothing you can do if someone is knocking you off for some reason.

You can change your IP, but if the person is on your friends list or checking your profile they can just get the IP again when you run the server.
The attack barely reaches 1mbps, my download bandwidth is 15mbps :steamsad:

The attacker is very noob, putting friends on offline is enough to hide from him..
But, if it does not reach high bandwitch, must be someway to block those attacks..
Btw, the game service is unnafected, i already have some iptables rules on..
最後修改者:Blaquicat; 2016 年 3 月 17 日 下午 6:56
[☥] - CJ - 2016 年 3 月 17 日 下午 7:11 
1st, you have to make sure you are getting your mbps kbps and so on correct, 15Mbps while decent isnt all that much. www.speedtest.net and post the results

2nd, if it wasnt doing what it was meant to do, it wouldnt be doing anything to you, but it is.

Now theres 2 ways of ddosing you
1: doing it himself, which would require an upload speed higher than your download speed
2: using a service, which can have bandwidth much higher than what most people are capable of handling. These attacks can range from anywhere between 5 minutes to an hour depending on what theyre using.

Even if a firewall is able to block the attacks its still using up your bandwidth, and thats what knocks you offline. This is the point of DDoSing.

Other than getting a better plan with a higher connection, changing your ISP, or contacting your ISP about the DDoS theres not much you can do about it.
最後修改者:[☥] - CJ -; 2016 年 3 月 17 日 下午 7:13
Blaquicat 2016 年 3 月 17 日 下午 7:33 
引用自 ☥ - CJ -
1st, you have to make sure you are getting your mbps kbps and so on correct, 15Mbps while decent isnt all that much. www.speedtest.net and post the results

2nd, if it wasnt doing what it was meant to do, it wouldnt be doing anything to you, but it is.

Now theres 2 ways of ddosing you
1: doing it himself, which would require an upload speed higher than your download speed
2: using a service, which can have bandwidth much higher than what most people are capable of handling. These attacks can range from anywhere between 5 minutes to an hour depending on what theyre using.

Even if a firewall is able to block the attacks its still using up your bandwidth, and thats what knocks you offline. This is the point of DDoSing.

Other than getting a better plan with a higher connection, changing your ISP, or contacting your ISP about the DDoS theres not much you can do about it.
1: http://www.speedtest.net/my-result/5176999776
(taken using wireless, on a notebook)

2: The first way for sure, barely reachs 1mbps (using nload and iftop to monitor) and that value is kinda of default upload speed for the market around here.
Most of the times i restart my modem and the internet got back on (ip is dynamic, but take a month to change) so, the attack mostly dont last long, 5 to 30min i believe.

It barely reaches 10% of my download speed, as posted on '1'..
I dont have any log on the debian about it, but i think i can take a picture or record a video on the next attack..
最後修改者:Blaquicat; 2016 年 3 月 17 日 下午 7:38
< >
目前顯示第 1-4 則留言,共 4
每頁顯示: 1530 50

張貼日期: 2016 年 3 月 17 日 下午 5:06
回覆: 4