DDOS First aid

Subyek: DDOS First aid Sat Oct 22, 2011 10:31 pm

1. Limit Incoming Connection

Address with too much connections can be added to address list for futher blocking.

Quote :: /ip firewall filter add chain=input protocol=tcp connection-limit=128,32 action=add-src-to-address-list address-list=blocked-addr address-list-timeout=1d

2. Tarpit Action
Instead of simply droping attackers packets(action=drop) router can capture and hold connections and with enough powerfull router is can kill the attacker.

Quote :: /ip firewall filter add chain=input protocol=tcp src-address-list=blocked-addr connection-limit=3,32 action=tarpit

3. SYN Filetring
Some advanced filtering can by applied to tcp packet state.

Quote :: /ip firewall filter add chain=forward protocol=tcp tcp-flags=syn connection-state=new action=jump jump-target=SYN-Protect comment="SYN Flood protect" disabled=yes
/ip firewall filter add chain=SYN-Protect protocol=tcp tcp-flags=syn limit=400,5 connection-state=new action=accept comment="" disabled=no
/ip firewall filter add chain=SYN-Protect protocol=tcp tcp-flags=syn connection-state=new action=drop comment="" disabled=no

4. SYN Cookie

Quote :: /ip firewall connection tracking set tcp-syncookie=yes

Subyek: Re: DDOS First aid Sat Oct 22, 2011 10:32 pm

good job !
thank's
:affraid:

Subyek: Re: DDOS First aid Sat Oct 22, 2011 10:33 pm

wow exelent DDOS First aid 772168924

Subyek: Re: DDOS First aid Mon Feb 11, 2013 11:54 pm

bang gimana caranya pengen nghack web yang ada pportalnya ???

» <ASK> Ddos IP server
» DDOS dengan VADIM
» DDOS ATTACK BERSAMA
» cara menangkal ddos?
» Mengenal ddos,cara melalukan,dan menanggulanginya