| Author |
Message |
admin |
|
Post subject: DDOS Attacks Prevention
 Posted: May 03, 2006 - 06:32 AM
|
|
Site Admin
Joined: Aug 02, 2004
Posts: 426
Location: Chicago
Status: Offline
|
|
Salam size bugun DDOSyn nadip kellami agirdanini aydasym gelyar. Ynha size RackSpace firmasi bilen aramyzda gecen gurrun:
Welcome to Rackspace. My name is Laura and I am a Live assistant. How may I help you today?
TmNet hi there
Laura: Are you interested in a dedicated managed server?
TmNet yes
Laura: hello
TmNet i currently paying 125$ a month for a VPS
TmNet want to go with dewdicated
Laura: what are you looking to host?
Laura: great
Laura: then you have come to the right place
TmNet But what kind of support you offer? because I am not a 100% server guru
TmNet I am frequently havind DDOs attacks now.. and my current host can't stop them
TmNet I can't add them into iptables always, because they're changing Ips ..
Laura: Here at Rackspace we offer managed dedicated servers. Managed means that we handle the hardware / network / OS / and provide security patching, program upgrades and services packs when they become available. We also fully test every patch that comes out to make sure it's stable and notify you of an available patch.
Laura:
TmNet do you provide service against these DDOS attacks?
Laura: we have a variey of different Managed Security services - Automated OS patching, Managed Network-based Intrusion Detection, Optional managed firewall device, Optional Managed VPN access, Server compromise checks on demand, Optional third-party security audit, Optional dedicated Intrusion Detection
Laura: Would you prefer to host on a Linux or Windows platform?
TmNet Linux
TmNet I have Fedora right now
TmNet How much it will cost me here a month, for a secure system that will prevent these attacks
TmNet if i am satisfied I will prepay for a year even maybe
Laura: Do you have a general idea of what kind of a configuration you will be requiring?
TmNet just don't want to be embarrased by clients
Laura: of course not
TmNet at least 512 mb ram
Laura: We customize every solution to fit your specific business needs, but here are three suggested solutions (on either the Linux or Microsoft platform)
Laura: http://www.rackspace.com/solutions/managedsampleconfigs.php
TmNet yes i am on that page
Laura: look these over and let me know which works best for you
TmNet sAMPLE one
TmNet pretty cool
TmNet LNX
TmNet Sample one is ok
Laura: a quick question...are you sure you are the one being attacked or is it somebody else that is sharing the server with you
TmNet Right now I am not sharing server with anybody
TmNet it is from outside
Laura: if your on a VPS
TmNet i have already blocked at least 30 IPs
Laura: then you are sharing the server with someone else
TmNet this is a dedicated VPS
TmNet 
TmNet i a wih RackForce.com
Laura: understand, however there is no such thing as a dedicated VPS. VPS means "virtual dedicated" which means it isn't dedicated. It's still shared really.
Laura:
Laura: So someone else who has a VPS on the same server could be the one being attacked.
TmNet i have a dedicated vps:) one customer per machine
TmNet check Completing our DDS series is the dds1000 Virtual Private Server / Dynamic Dedicated Server . The dds1000 is a fully dedicated server that utilizes Virtuozzo and RackForce DDS technology. This allows you to scale from entry level DDS/VPS servers right up to a fully dedicated server with near ZERO DOWNTIME and NO COST.
TmNet http://www.rackforce.com/dds_dedicated_servers/dds_virtual_private_servers.html?lid=dds1000_Details&lpos=dds_box
TmNet VEs per Physical Host = 1
TmNet OK I gotta go
Laura: let me do this foryou.
TmNet could you please send me quotes to mm@turkmenweb.com
TmNet thank you
Laura: .....I will make a contact with a solutions specialist for you to receive a customized quote. They can also answer any specific questions you have about configuration, setup fees,deployment, security, etc.
TmNet OK
Laura: In order to arrange this, may I please have your full name, company name, email address and phone number?
TmNet and do you offer support?
TmNet tech support?
TmNet like if i want to install a module or something? $$/hour?
Laura: We can offer you true 24/7 live support which is unlimited. You can either call on an 800 number or submit a ticket. Calls are answered within a couple of rings and tickets within 7 minutes on average. You will also have your own dedicated account manager, business consultant, and tech support team.
TmNet ....size bu gerek dal...
TmNet thank you
Laura: I don't like to make promises for the tech support guys....if it is possible that will have to be discussed with the specialist.
TmNet ok
Laura: what is the company name associated with this?
Laura: and If you mean a module in Plesk, then yes it is included.
TmNet Turkmenweb 2M E-Solutions
TmNet module, I mean like in Apache
TmNet mod_security or mod_evasive
Laura: we offer a service if you want true DDOS protection but it is not going to be cheap
TmNet just send me the prices please
TmNet because i am contacting a few other companies too. we'll see which one is more convenient for us
Laura: okay Apache.....will come preinstalled in a linux box
TmNet but we want to get rid of all these attacks. so that no kid out there can let the server down
Laura: you will be needing at least 2 servers, a firewall, and loadbalancing
TmNet not Apache:) extra stuff for apache
TmNet hmmm. we are trying to do that with 1
Laura: which other companies are you looking at for this project?
Laura: for a single server with a firewall will start you off at around $550 per month.
Laura: With that we provide 24//7/365 Live FANATICAL Support, Guaranteed 100% Network UPTIME, Your Own Dedicated Support Team and Account Manager, and a 1-Hour Hardware Replacement, Guaranteed! Will this work for you?
TmNet that would be perfect, but it's just too much. with our budget for right now - we are looking for something around 150 200
TmNet and of course long term
Laura: i see.
TmNet with my current company i am more than a year
TmNet and i am moving because they can't manage us
TmNet with this attacsk
TmNet they just can't do it.
TmNet we told their manager, but still nothing'
Laura: well we can help you with that
TmNet ?
Laura: it really boils down to how important stopping these attacks are to you
TmNet it is very important and >150 is also very important:)
TmNet I could exactly tell you what I want
TmNet technically
TmNet This is what I am getting in my netstat -an
TmNet 0 0 69.10.135.181:80 71.201.221.223:1869 ESTABLISHED tcp 0 1 69.10.135.181:36984 69.10.135.181:80 SYN_SENT tcp 0 0 69.10.135.181:80 71.201.221.223:1843 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1842 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1840 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:2096 ESTABLISHED tcp 0 25076 69.10.135.181:22 75.2.85.141:3622 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1846 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1845 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1844 ESTABLISHED tcp 0 0 69.10.135.181:80 71.201.221.223:1849 ESTABLISHED
TmNet You see? this is my IP 69.10.135.181 .. and the other is my attacker
TmNet and this is what I do to prevent this:
TmNet A VZ_INPUT -s 84.19.180.49 -p tcp -j DROP -A VZ_INPUT -s 84.19.180.49 -p udp -j DROP -A VZ_INPUT -s 193.214.228.107 -p tcp -j DROP -A VZ_INPUT -s 193.214.228.107 -p udp -j DROP -A VZ_INPUT -s 195.5.50.8 -p tcp -j DROP -A VZ_INPUT -s 195.5.50.8 -p udp -j DROP -A VZ_INPUT -s 85.101.99.167 -p tcp -j DROP
TmNet into iptables I add this lines... and I have dozens of these lines there... with different attacking IPs
TmNet what I want is - I want something that will prevent these kind of attacks
TmNet when multiple connections from an IP is made.. i want server to stop them
Laura: Yeah, that would work for a while until he just changes his IP
TmNet EXACTLY!
TmNet and they always change IPs
TmNet and we are just bored and exhausted here
TmNet adding their IPs into iptanblkes
TmNet now did i exlain the situation?
Laura: Unfortunately with something like this, unless you get a sophisticated DDOS mitiagation service, there's really no easy way to get around it.
TmNet hmm
TmNet and how much you say that will cost
Laura: It can get pretty pricy. You'd be looking in the $1000's per month.
TmNet WOW
TmNet no common. there should be a simple way of geting rid of it
TmNet every one is vulnarable to this attacsk
TmNet and you say there is no simple solution?
TmNet there should be some
Laura: It's mainly used by large companies that can lose thousands or millions in revenue due to DDOS attacks. Or by government agencies who require security.
TmNet but we also have tens of customers. and once these attacks start - server goes down. sites are down
TmNet customers complaining..
TmNet and we don't have a dedicated GUY to monitor these attacks constantly
Laura: There really is no simple way around it. I am familiar with a guy who is very smart in regards to networking. He was attacked for a while by a 13 year old and really had no way to stop it. You can check out his story here: http://grc.com/dos/grcdos.htm
TmNet i saw this link before
Please wait while I transfer the chat to 'Mark L'.
Welcome to Rackspace. My name is Mark L and I am a Live assistant. How may I help you today?
TmNet hello
TmNet can you see the chat script above?
TmNet i don't know why i was transfered to you
Mark L: Hi. Yeah the link has been around for quite a while.
Mark L: Yes, I've been assisting Lori in her responses 
TmNet oh i see
TmNet so what do you say
TmNet noway to do it and fit it in $200?
Mark L: It's very difficult to deal with some of these DDOS attacks really.
TmNet yeah, ask me:).. everyday i am dealing with them
TmNet just got tired
Mark L: Not really, no hoster can really give you a good solution for that range.
TmNet but do you have a lot of customers like me complaining about this?
Mark L: I do know of one who might be able to offer you some sort of protection however.
TmNet just curious don't they also have the same probmes?
Mark L: Sometimes yes.
Mark L: Well in most cases the attacks only last for a week or two, then the attacker gets bored.
TmNet sometimes? 20% of all? or around 5%?
Mark L: Unless he has a personal vendetta against you of course.
TmNet yea i see.
TmNet but our attacker.. is there for a half a yerar
TmNet differnet people
Mark L: Hmmm...I would say maybe 5% or so.
TmNet i see
Mark L: I see, what kind of site do you have?
TmNet these guys have personal reasons..
TmNet jealous:))
Mark L: Ah
TmNet well, we are a young company originated in Turkmenistan.. but now I am in Chicago with my team in different places of the world
TmNet have different companies hosting with us
TmNet and have our own projects
TmNet like tmchat.ru
TmNet #1 chat site in that region
Mark L: IRC?
TmNet web based
TmNet or first central asian radio online at tmhits.com/radio
TmNet and many other Regoinal Sites
TmNet not much for US audience:)
Mark L: I understand. You may want to check these guys: http://www.gigeservers.com/ I think they have a sort of DDOS mitigation on their whole network. I don't know how well something like that works (not nearly as robust as our PrevenTier) but it may offer you some protection.
Mark L: Hope that helps.
TmNet so you say i can't find anything i want in the price range i ask?
Mark L: Not here at Rackspace I'm afraid, maybe at that other hoster.
TmNet OK then, thank you man.
Mark L: The DDOS mitigation is pretty complex, so it isn't cheap.
TmNet HAve a good one.
TmNet YOu were very helpful
Mark L: My pleasure, let me get you back to Lori so she can say goodbye.
Mark L: |
_________________
Online radio from Ashgabat/Turkmenistan. http://tmhits.com/radio
|
| |
|
|
|
 |
|
admin |
|
|
Post subject: RE: DDOS Attacks Prevention
Posted: Jun 12, 2006 - 08:05 PM
|
|
Site Admin
Joined: Aug 02, 2004
Posts: 426
Location: Chicago
Status: Offline
|
|
| bu DDOS problemasyny cozduk, we de olaryn aydisi yali 1000$/month toleman. |
_________________
Online radio from Ashgabat/Turkmenistan. http://tmhits.com/radio
|
| |
|
|
|
|
|
Gex |
|
|
Post subject: RE: DDOS Attacks Prevention
Posted: Jun 13, 2006 - 08:17 PM
|
|
черпак
Joined: Feb 14, 2005
Posts: 88
Location: A$gabat
Status: Offline
|
|
nadip, kimden satyn aldynyz?
podrobniy yazyp biljekmi? |
_________________
To you, she's beautiful.
For me, there's only my wife and son.
|
| |
|
|
|
|
|
admin |
|
|
Post subject: RE: DDOS Attacks Prevention
Posted: Mar 12, 2007 - 05:23 AM
|
|
Site Admin
Joined: Aug 02, 2004
Posts: 426
Location: Chicago
Status: Offline
|
|
Apache bir topar module setup ettik - mod_evasive yali. Sonra custom made ddos scriptler yasap setup edildi.
Sistemada su wagt aktif bolan 10-15 toweregi anti-ddos robot dur, sistemanyn statusyny hemise barlayarlar. |
_________________
Online radio from Ashgabat/Turkmenistan. http://tmhits.com/radio
|
| |
|
|
|
|
|
Muhacir |
|
|
Post subject:
Posted: Mar 13, 2007 - 08:42 AM
|
|
дух
Joined: Nov 20, 2006
Posts: 24
Status: Offline
|
|
Mdee ddos disene. Bah modulem diyan mi? Robotom bar my? Gyzykly.. Borlay
Şugün Türkmenistan Sagady Bilen
22:50-23:10 Arasy Kiçijek Bir Test Ettim. Bary Yogy 780 sanjak maşyn bardy yaryşda. we ASBHost, hosting division of Turkmenweb 2M E-Solutions company Yarym sagatlyk down boldy. Sebabini sorasan aydayin: hiçhili diş magsadym yok. Hudaya şükür büdjetimiz bar we sizden ASBHost, hosting division of Turkmenweb 2M E-Solutions company hosting aljaktyk yöne gynansagam netijeler göwün açyjy dal. Robotlary köpeltmeli mi ya robotlor men yali dynç almaga gitti mi bu barada weekende www.orucoglu.com.tr de dynç aldym da özüme gelip oturşum. |
_________________
|
| |
|
|
|
|
|
admin |
|
|
Post subject:
Posted: Mar 13, 2007 - 08:56 AM
|
|
Site Admin
Joined: Aug 02, 2004
Posts: 426
Location: Chicago
Status: Offline
|
|
2 Muhacir -
Serveri down edenok dine web serveri - beyleki butin hyzmatlarymyz gul yali ishlap dur.
Senin bu hepde sony web serveri down edenin dogry; yone aydysyn yaly 2 sagat dal:)
ddos barada ThePlanet bilen bu gunlerde ylalasjak bolyariz, tamamlamyzda sana guk ederin 'test' etmen ucin. |
_________________
Online radio from Ashgabat/Turkmenistan. http://tmhits.com/radio
|
| |
|
|
|
|
|
Muhacir |
|
|
Post subject:
Posted: Mar 13, 2007 - 08:59 AM
|
|
дух
Joined: Nov 20, 2006
Posts: 24
Status: Offline
|
|
|
admin wrote:
2 Muhacir -
Serveri down edenok dine web serveri - beyleki butin hyzmatlarymyz gul yali ishlap dur.
Senin bu hepde sony web serveri down edenin dogry; yone aydysyn yaly 2 sagat dal:)
ddos barada ThePlanet bilen bu gunlerde ylalasjak bolyariz, tamamlamyzda sana guk ederin 'test' etmen ucin.
men hepde sony hiç zat etmedim. men dynç aldym . 2 sagat özüma down boldum yone kimin name serveri bilmedim. gepin tümmek yeri barlagdy we REJECTED |
_________________
|
| |
|
|
|
|
|
|
|
FAQ
Search
Register
Log in to check your private messages
Log in
Sub-Category
Maximize
![[Valid RSS]](images/powered/valid-rss.png "Validate my RSS feed"){kind=small}
This work is licensed under a Creative Commons License.