Help on DDOS/DOS attacks on SAMP servers

[filth80]

Hello, please help if anyone knows how to block DDOS/DOS attacks on SAMP servers?We are using csf+lfd. I have these rules:

iptables -I INPUT -p udp -dport 7777 -m state --state NEW -m recent --set
iptables -I INPUT -p udp -dport 7777 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j DROP

but I don't know if they are ok, and how should i put them in iptables.If you have another method, please post.Thank you.

[Infopro]

You might try installing CSF ConfigServer Security & Firewall to see if that helps. You might also ask over on the SAMP forums.

[filth80]

Hello, please help if anyone knows how to block DDOS/DOS attacks on SAMP servers?We are using csf+lfd. I have these rules:

iptables -I INPUT -p udp -dport 7777 -m state --state NEW -m recent --set
iptables -I INPUT -p udp -dport 7777 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j DROP

but I don't know if they are ok, and how should i put them in iptables.If you have another method, please post.Thank you.

In SAMP forums they say to find the ip and ban it.For DDOS attack this is useless.I want to know how to config firewall, we already have CSF+LFD installed.Thank you for response.

[Infopro]

For a real DDoS attack you'd need to contact your provider. That might be a long thread to describe the best settings for your firewall, there are way too many settings to adjust to find your sweet spot.

You can however take the fast lane a bit with CSF using the Firewall Security Level configuration page. Click High, and save. Once you've done that and restarted the firewall, you may find some of those settings a bit tight for whatever reason. To adjust one of them you'll need the name of the setting from that same Firewall Security Level configuration page, and then go to the Firewall Configuration page and locate that name to adjust.

My apologies for missing the CSF mention in the OP.

[IPSecureNetwork]

as Infopro say if you are under Big DDoS attacks you must have an infraestructure to deal with it.
Contact your provider or move to one provider with ddos protections.
Anyway to have a better idea about your problem let me know a few things...

all the box turn unaccesible when the attack is in progress or only the SAMP?

its only UDP the attack?


if the box is accesible when the attack is in progress maybe we can help you with a few tips to put in your box .. ( NOT IPTABLES ) to prevent the attack to the SAMP service.

if the box turn off well you must talk with your provider or find another with ddos protections.