As far as cservice/live goes

Ask questions about Undernet's Channel Service
Fud
Posts: 1

As far as cservice/live goes

Post by Fud »

I sort of can't believe no one can block the attacks nor do i know whoever runs the site has admin access.
There are simple rules that can be applied in iptables to block attacks after a certain hitcount to drop in seconds and the amount of time.

For eg iptables -I INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --set

then iptables -I INPUT -p tcp --dport 80 -i eth0 -m state --state NEW -m recent --update --seconds 80 --hitcount 3 -j DROP

These numbers can be adjusted for seconds and hitcount, I had to use that for a server i worked on that was being pounded on smtp and shh constantly and it worked.

But what do I know just being an undernet user getting asked by people how can they register now and i say they can't because the site is down for months.

I suggested making that possible through X and was directed here.

Cheers

*Topic has been moved to Channel Service Help by moderator.*

User avatar
xplora
Posts: 564
Location: Hamilton, New Zealand

Post by xplora »

thats not going to stop a DoS attack... it's about volume of traffic, try thinking about the amount of traffic travelling down a motorway (yes I mean cars) during rush hour, make rush hour last every second of the day, and turn the motorway into a single lane street.

Also apply the fact that it's a free service, so there is no money to upgrade the road, let alone the fact that the share amount of cars trying to travel our special road would require a road thousands of times the size to actually solve the problem.

Using iptables would be like putting traffic lights at the end of the road, which wouldn't help.
xplora @ undernet.org
Past Co-ordinator
Undernet Channel Services Committee

blacklist3d
Posts: 1

Post by blacklist3d »

but what is the alternative sloution for this matter or it will be like this for ever no one can make id nor channel get registered on undernet

User avatar
xplora
Posts: 564
Location: Hamilton, New Zealand

Post by xplora »

I'm afraid all I know is that something is being worked on.
xplora @ undernet.org
Past Co-ordinator
Undernet Channel Services Committee