Programming Forums
User Name Password Register
 

RSS Feed
FORUM INDEX | TODAY'S POSTS | UNANSWERED THREADS | ADVANCED SEARCH

Reply
 
Thread Tools Display Modes
Old Mar 2nd, 2006, 2:17 PM   #1
JDStud6
Programmer
 
Join Date: Jan 2005
Location: Charleston, SC www.wareonearth.com
Posts: 57
Rep Power: 4 JDStud6 is on a distinguished road
Send a message via AIM to JDStud6
DoS protection needed?

I have been looking for a hosting site that offers DoS protection on its servers. I havent seen any that actually say they have it. Is it really important to have? What are the things that could happen if I didnt have it?

JD
JDStud6 is offline   Reply With Quote
Old Mar 2nd, 2006, 2:52 PM   #2
zorin
Hobbyist Programmer
 
Join Date: Apr 2005
Posts: 218
Rep Power: 4 zorin is on a distinguished road
well DDoS is an important issue to consider if you have an online business, If you come under attack from a DDoS atack will it affect the customers who use your website? If you talk to your ISP you could get somthing figured out incase anything like that happens. Oh and I would also choose a decent ISP that can deal with large amounts of traffic to your servers. If your ISP carn't handele millions of packets of data, it dosen't matter what DDoS protection
zorin is offline   Reply With Quote
Old Mar 6th, 2006, 1:10 PM   #3
Godmode
Newbie
 
Join Date: Jun 2005
Posts: 13
Rep Power: 0 Godmode is on a distinguished road
It can't be fully stopped. But to block most of the attacks firewall should block for example ICMP's.. Good host has well configured firewall too I think, it's not your problem if you're not the host. Leet hacker can still punch the F5 button
Godmode is offline   Reply With Quote
Old Mar 6th, 2006, 4:21 PM   #4
White-Hat`
Programmer
 
Join Date: Sep 2005
Location: Oopland
Posts: 36
Rep Power: 0 White-Hat` is on a distinguished road
Ninety percent of Distributed Denial of Service attacks can be stopped with a correclty configured router firewall. The rest is up to the way the OS is configured and how the Daemons are configured.

-Blocking ICMP Echoes will stop a Smurf, Ping of Death and ICMP flood attack.
-Banning IPs which attempt to do the TCP/IP handshake too quickly (multiple connections) will stop a SYN flood, but can have it's downfall. Another way is to configure either your daemon or registry to allow only so many handshake 'attempts' in a certain amount of time. If anymore come, it will just bounce it. Couple that with a carefully crafted banning feature, and you should be good to go.
-Blocking IP spoofed packets will also stop a Teardrop attack, and will help to block more advanced DDOS attempts, as well as a few other namely attacks

Buut like I said, a well configured router firewall should cover all these bases and hopefully include the above, or at least part of it. Look for high grade Cisco catalyst routers and switches.
White-Hat` is offline   Reply With Quote
Reply

Bookmarks

« Previous Thread in Forum | Next Thread in Forum »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




DaniWeb IT Discussion Community
All times are GMT -5. The time now is 11:18 AM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC