hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : UDP Flood Protection
Reply

Forum Jump

UDP Flood Protection

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 08-31-2012, 04:44 AM
kshazad86 kshazad86 is offline
Web Hosting Master
 
Join Date: Jan 2011
Posts: 607

UDP Flood Protection


ok, recently one of my servers suffered a UDP flood attack, and I was wondering the best steps to take to prevent similar attacks taking place as the attacker seemed to be using a spoofed IP address according to the server logs.

Note: I am using cPanel with ConfigServer.

Would blocking out ICMP_IN feature in CSF help with this?



Sponsored Links
  #2  
Old 08-31-2012, 05:30 AM
kshazad86 kshazad86 is offline
Web Hosting Master
 
Join Date: Jan 2011
Posts: 607
Quote:
Originally Posted by kshazad86 View Post
ok, recently one of my servers suffered a UDP flood attack, and I was wondering the best steps to take to prevent similar attacks taking place as the attacker seemed to be using a spoofed IP address according to the server logs.

Note: I am using cPanel with ConfigServer.

Would blocking out ICMP_IN feature in CSF help with this?
Just checking if there is a way of rate limiting UDP connections to the server with CSF?

  #3  
Old 08-31-2012, 05:50 AM
_0xE2 _0xE2 is offline
Junior Guru Wannabe
 
Join Date: Apr 2012
Location: Compton
Posts: 30
Honestly the only spoofed UDP floods I see are amplified DNS attacks, see if your provider will block UDP/ICMP with ACL rules for you if the attacks are big.

Sponsored Links
  #4  
Old 08-31-2012, 06:05 AM
kshazad86 kshazad86 is offline
Web Hosting Master
 
Join Date: Jan 2011
Posts: 607
Quote:
Originally Posted by _0xE2 View Post
Honestly the only spoofed UDP floods I see are amplified DNS attacks, see if your provider will block UDP/ICMP with ACL rules for you if the attacks are big.
It cant be an amplified DNS attack because DNS recursion is disabled on the server.

  #5  
Old 08-31-2012, 06:17 AM
dareORdie dareORdie is offline
Disabled
 
Join Date: Nov 2011
Location: Nasik, MH,INDIA
Posts: 850
I recommend the csf firewall and cXs exploit scanner from configserver.com.

  #6  
Old 08-31-2012, 11:22 AM
TravisT-[SSS] TravisT-[SSS] is offline
Temporarily Suspended
 
Join Date: Mar 2012
Location: Tampa, FL =)
Posts: 1,748
Get hardware protection. Software firewalls are more designed for AC/ID not protection from floods.

Reply

Similar Threads
Thread Thread Starter Forum Replies Last Post
Help, Under UDP flood attack mehrdadabed Dedicated Server 9 07-22-2012 11:19 PM
Dedicated Server offers udp flood protection ryansmith Dedicated Server 2 04-26-2012 05:59 AM
Need Help UDP Flood in Windows ryansmith Hosting Security and Technology 2 04-22-2012 12:19 PM
which data center can provide UDP Flood Attack protection? popuser Dedicated Server 4 09-07-2010 12:11 AM
Please Please Please Help! Udp Flood? ukbill69 Hosting Security and Technology 6 06-08-2006 02:11 PM

Related posts from TheWhir.com
Title Type Date Posted
Cloud Providers Could Face Scrutiny as Europe’s Privacy Watchdog Calls for Stronger Data Protection Web Hosting News 2014-07-16 14:16:16
AQUA Networks Limited Listing 2014-01-27 20:52:06
Prolexic Mitigates DDoS Attacks on Henyep Financial Trading Sites Web Hosting News 2013-01-24 11:36:11
Windstream Business Launches McAfee Endpoint Security Protection for SMBs Web Hosting News 2013-01-18 14:35:52
DEMO VIDEO: Idera Continuous Data Protection (Part 2) Whir Tv 2014-05-02 15:00:13


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:
WHT Membership
WHT Membership



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?