Results 1 to 6 of 6
  1. #1
    Join Date
    Jan 2011
    Posts
    671

    UDP Flood Protection

    ok, recently one of my servers suffered a UDP flood attack, and I was wondering the best steps to take to prevent similar attacks taking place as the attacker seemed to be using a spoofed IP address according to the server logs.

    Note: I am using cPanel with ConfigServer.

    Would blocking out ICMP_IN feature in CSF help with this?

  2. #2
    Join Date
    Jan 2011
    Posts
    671
    Quote Originally Posted by kshazad86 View Post
    ok, recently one of my servers suffered a UDP flood attack, and I was wondering the best steps to take to prevent similar attacks taking place as the attacker seemed to be using a spoofed IP address according to the server logs.

    Note: I am using cPanel with ConfigServer.

    Would blocking out ICMP_IN feature in CSF help with this?
    Just checking if there is a way of rate limiting UDP connections to the server with CSF?

  3. #3
    Join Date
    Apr 2012
    Location
    Compton
    Posts
    30
    Honestly the only spoofed UDP floods I see are amplified DNS attacks, see if your provider will block UDP/ICMP with ACL rules for you if the attacks are big.

  4. #4
    Join Date
    Jan 2011
    Posts
    671
    Quote Originally Posted by _0xE2 View Post
    Honestly the only spoofed UDP floods I see are amplified DNS attacks, see if your provider will block UDP/ICMP with ACL rules for you if the attacks are big.
    It cant be an amplified DNS attack because DNS recursion is disabled on the server.

  5. #5
    Join Date
    Nov 2011
    Location
    Nasik, MH,INDIA
    Posts
    850
    I recommend the csf firewall and cXs exploit scanner from configserver.com.

  6. #6
    Join Date
    Mar 2012
    Location
    Tampa, FL =)
    Posts
    1,748
    Get hardware protection. Software firewalls are more designed for AC/ID not protection from floods.

  7. Newsletters

    Subscribe Now & Get The WHT Quick Start Guide!

Similar Threads

  1. Help, Under UDP flood attack
    By mehrdadabed in forum Dedicated Server
    Replies: 9
    Last Post: 07-22-2012, 11:19 PM
  2. Dedicated Server offers udp flood protection
    By ryansmith in forum Dedicated Server
    Replies: 2
    Last Post: 04-26-2012, 05:59 AM
  3. Need Help UDP Flood in Windows
    By ryansmith in forum Hosting Security and Technology
    Replies: 2
    Last Post: 04-22-2012, 12:19 PM
  4. which data center can provide UDP Flood Attack protection?
    By popuser in forum Dedicated Server
    Replies: 4
    Last Post: 09-07-2010, 12:11 AM
  5. Please Please Please Help! Udp Flood?
    By ukbill69 in forum Hosting Security and Technology
    Replies: 6
    Last Post: 06-08-2006, 02:11 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •