![]() |
|
![]() |
|
|
Thread Tools | Display Modes |
|
|
#1 |
|
Programmer
|
DoS protection needed?
I have been looking for a hosting site that offers DoS protection on its servers. I havent seen any that actually say they have it. Is it really important to have? What are the things that could happen if I didnt have it?
JD |
|
|
|
|
|
#2 |
|
Hobbyist Programmer
Join Date: Apr 2005
Posts: 218
Rep Power: 4
![]() |
well DDoS is an important issue to consider if you have an online business, If you come under attack from a DDoS atack will it affect the customers who use your website? If you talk to your ISP you could get somthing figured out incase anything like that happens. Oh and I would also choose a decent ISP that can deal with large amounts of traffic to your servers. If your ISP carn't handele millions of packets of data, it dosen't matter what DDoS protection
|
|
|
|
|
|
#3 |
|
Newbie
Join Date: Jun 2005
Posts: 13
Rep Power: 0
![]() |
It can't be fully stopped. But to block most of the attacks firewall should block for example ICMP's.. Good host has well configured firewall too I think, it's not your problem if you're not the host. Leet hacker can still punch the F5 button
![]() |
|
|
|
|
|
#4 |
|
Programmer
Join Date: Sep 2005
Location: Oopland
Posts: 36
Rep Power: 0
![]() |
Ninety percent of Distributed Denial of Service attacks can be stopped with a correclty configured router firewall. The rest is up to the way the OS is configured and how the Daemons are configured.
-Blocking ICMP Echoes will stop a Smurf, Ping of Death and ICMP flood attack. -Banning IPs which attempt to do the TCP/IP handshake too quickly (multiple connections) will stop a SYN flood, but can have it's downfall. Another way is to configure either your daemon or registry to allow only so many handshake 'attempts' in a certain amount of time. If anymore come, it will just bounce it. Couple that with a carefully crafted banning feature, and you should be good to go. -Blocking IP spoofed packets will also stop a Teardrop attack, and will help to block more advanced DDOS attempts, as well as a few other namely attacks Buut like I said, a well configured router firewall should cover all these bases and hopefully include the above, or at least part of it. Look for high grade Cisco catalyst routers and switches. |
|
|
|
![]() |
| Bookmarks |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
|
|