Ddos attacks in Dedicated Servers

If you are experiencing a Ddos attack in your server , How do you stop it ? Normally how long it takes to get all things cleaned ?

__________________

Not sure, but I would first contact your ISP and see what they say about it. They can at least advise you on what software to install to prevent further attacks, or put some sort of ban if it's a single IP address. I would be interesting in hearing the answer to this as well as from others.

You could contact your hosting service provider. They would definitely help you. If you are administering your server, please follow some of these steps.

You will have to update your Operating system and web server regularly and make sure you have the patch installed for latest security vulnerabilites.

Block unnecessary ports using a port scanning tool.

Check for your system configuration and use an intrustion detection system.

This is an excellent tool to overcome Ddos attack or bruce force attack.
http://www.zdziarski.com/projects/mod_evasive/ (for Apache server)

Banning a single Ip address will not help as DDos attacks are carried out a large number of networked computers.
Blocking unnecessary ports will definitely help.
Also Restarting the server may help,but this might be risky as your server will offline for some time.

Agree about port blocking and IP ban wouldn't work. But I'm not sure about that restarting the server would help. Will keep it turned off for like 12 hours would stop it ?

__________________

What kind of softwere is usually used for preventing DDOS attack?

The consequences os serious DDOS attacks may be felt for up to 5 hours. None of the hosts is secured from it.

Get some proffesional word - SSANZ


- They can last up to a month
- dDOS kiddies don't attack sits for no reason.
- Your ISP can only do two things - Block at routers, or nullroute your IP.
- Don't turn your server off
- Giving up only gives up the war - victory for skiddie ( Script kiddie )
- DROP packets at your firewall, don't reject or fail them. uses too much CPU..
- apache MOD_evasive

PM me if you would like us to look further into taking DOWN the botnet. SSANZ offer anti-dDOS services.

Regards,
SSANZ TEAM

__________________
Server Systems Administration NZ
SSANZ.NET | Server Security | Hosting Systems
Experienced, Professional & Available 24/7