Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : blocking DDoss attacks

[berry05]

does a server automatically block DDos attacks or do i need a hardware firewall for it?
is there such thing as a software for a server for blocking DDos attacks?

[The Universes]

It depends on what kind of a DDOS attack it is. You can install a software firewall and drop all packets from the offenders IPs, but thats useless if your pipe is getting filled up. To answer your question, unless you have something specifically installed, a server does not automatically block DOS attacks.

[berry05]

well what would you suggest for a firewall? just wondering?

[Klentelaris]

Depend what kind of ddoss attack,if it's heavy ddos attack then you cant do anything.

[dualpacket]

You can find a host with good ddos protection , for web hosting,

hostgator.com
godaddy.com
tmzhosting.com

for dedicated servers,

midphase.com
softlayer.com
theplanet.com
hivelocity.net - can only block ddos on the network side not really good to protect a main server.

[brianoz]

To cope with many types of attack, use the CSF (www.configserver.com/cp/csf.html) firewall, assuming you're using cPanel. That catches and blocks many types of security probes, hacks, and DOS attacks.

True DDOS attempts are notoriously hard to block, but thankfully they are rare in real life provided you don't antagonize the wrong people.

Worth also installing mod_security, and suphp if you are running cPanel. In fact, I'd go the whole 9 yards if you're serious about a business and have a professional team secure your server - either use, as an example, ConfigServer (very good from experience) or Platinum Servers (got a great reputation). They do extra things and a small amount of money spent now will save you hours of grief down the track.

[webuser00]

Hostgator is terrible with DDOS. I was attacked 1 time, for a period of about 5 mins, apparently it slowed down the server, so instead of trying to fix it, they null routed my domain, and refused to unsuspend my account. It was a pain just having them give me my files.

[berry05]

is barracudanetworks
good for protection?

just wondering if there firewall is good

[Orien]

Most if nearly all shared hosts will nullroute your website if they can't block the attack, which happens quite often.

[berry05]

orien i like how your hosting site is setup..is there something that can set it up for me to make it look like that or do i have to code it myself?

[BradQ]

What makes you say midphase has excellent DDos protection? Last I checked literally nothing in the SingleHop/Midphase network was even VLAN'd, much less some kind of DDoS protection.

[bhavicp]

I would recommend Softlayer.com.

[eming]

Originally Posted by BradQ

What makes you say midphase has excellent DDos protection? Last I checked literally nothing in the SingleHop/Midphase network was even VLAN'd, much less some kind of DDoS protection.

Midphase has no dedicated servers in the Singlehop facility.
Our full dedicated infrastructure is at Softlayer. Same goes for 10tb.com.
We are in the process of migrating our shared hosting database to Softlayer as well - around 30% done.

http://www.softlayer.com/press_2008_03_31.html

[Xous]

Originally Posted by Orien

Most if nearly all shared hosts will nullroute your website if they can't block the attack, which happens quite often.

eh? null routing is takes place in the network layer -- you can't simply null route a single domain. Most if not all shared providers use a single shared IP address per shared customer unless the customer pays extra for a "dedicated" IP address.

The real question you need to answer is how much DDoS protection can you afford. How much of a DDoS are you expecting?

Just about ANY provider except some of the larger ones will drop you as a customer if you continually get DDoS'ed and the ones that don't are billing you for the bandwidth anyway.

[meyu]

if you need real ddos protection server.
consider these companies:
www.awknet.com
www.blacklotus.net
www.staminus.net
www.gigeservers.net
www.sharktech.net

Softlayer has cisco guard for ddos protection but it can only filter some small-mid size attacks, if you are under attack you need to request for cisco guard protection, they will put your IP behind cisco guard for 24 hours. It's not automatically protected.