Prospecthost
09-05-2003, 10:54 PM
DOES ANY1 no how to fix this my hoster has been attacked VERY BADLY forced them to go when they open up ther router gets flooded useless packets if any1 no fix it id love u for life! please just post it here i cant get my email due to this problem i no its effecting alot of people such as htmlforums.com and others. the ip has had 8,000 different logs. It is exermly serous they informed the fbi about it
IGobyTerry
09-05-2003, 11:08 PM
Block the attackers IP(s) or get the upstream provider to block them for you.
sprintserve
09-06-2003, 12:11 AM
If your host don't know what to do, you need a new one. That said, if it is bad enough, i.e. the attacker keeps spoofing/rotating new ips and such, it may be hard to nail them down.
But blocking it on the local level is step 1 and getting the data center to help if the attack is too serious. If needed, they can even request the upstream to block it on their routers.
All in all, the response depends on the severity (and type) of attack.
thedavid
09-06-2003, 12:35 AM
Sprintserve is 100% correct. Also, sometimes shutting down the targetted daemon (like if they're attacking the webserver, shutting down httpd) sometimes helps. At least you'll get your email then.
-David