🔒 Closed ddos

[easytodoitdotcom]

so alin po ba ang totoo?

na confused na ako

 

[divinista]

Wag po kayo umasa sa pangako kaya kayong "protektahan" and yet hides behind the big gun.

With or without your "skript", cloudflare is already shielding for you by a) absorbing the volume of traffic; b) distributing the traffic through DNS geolocation.

Why don't you setup you domain in an independent IP and not behind somebody else's? DDOS can only be mitigated by outgunning the offender(s) by deploying bigger "pipe" that can contain the volume of traffic and by geolocated DNS.

Oh, by the way I am not into destroying your business. I admire when people do start their own. It is just that your info is misleading.

Hindi ko po business ang pagcocode ko o kahit ang vpn...libangan ko lang ang pagdevelop ng web dahil may trabaho ako na hindi related sa web developing...nakita mo naman siguro kung magkano ang price ng panel na ginawa ko?1k kumpara sa iba...bukod pa dyan e nakita mo bang sa akin nakikipagtransact ang gustong mag avail?

masyadong mainit ka yata sa cloudflare...feeling hero ka po talaga..gusto mo e ako pa ang mag adjust sayo, ipipilit mong magdirect ip na lang..parang ewan lang...kahit ***** ip pa ang site ko e walang kwenta din..gusto mo ibigay ko pa sayo ip ng server ko...shared hosting lang ang gamit ko, mapapadown mo kaya ang IP ng Shared Hosting o ngangawa ka na naman dahil wala kang alam?hmm..kunsabagay,linux este debian master ka nga po pala kaya baka hindi mo alam ang cpanel...use ka na lang po ng google para maseemu...

 

[divinista]

kaya nga hahaha karamihan sa phcorner.org/#forbidden# eh panel di ba hahaha at karamihan ng nagamit ng phcorner.org/#forbidden# eh hindi marunong gumamit ng security features ng hosting (not ssl)

hindi ko po magets..hehe,basta ang tk po ay domain extension lang po yan...

 

[homer_simpson]

Hindi ko po business ang pagcocode ko o kahit ang vpn...libangan ko lang ang pagdevelop ng web dahil may trabaho ako na hindi related sa web developing...nakita mo naman siguro kung magkano ang price ng panel na ginawa ko?1k kumpara sa iba...bukod pa dyan e nakita mo bang sa akin nakikipagtransact ang gustong mag avail?

masyadong mainit ka yata sa cloudflare...feeling hero ka po talaga..gusto mo e ako pa ang mag adjust sayo, ipipilit mong magdirect ip na lang..parang ewan lang...kahit * ip pa ang site ko e walang kwenta din..gusto mo ibigay ko pa sayo ip ng server ko...shared hosting lang ang gamit ko, mapapadown mo kaya ang IP ng Shared Hosting o ngangawa ka na naman dahil wala kang alam?hmm..kunsabagay,linux este debian master ka nga po pala kaya baka hindi mo alam ang cpanel...use ka na lang po ng google para maseemu...

Ayaw talaga tumigil nito. What exactly do you want? Paano mo nasabi mainit ako sa Cloudflare? Can you point me to any of my posts saying exactly that?

So cpanel expert ka? Good!

 

[divinista]

Ayaw talaga tumigil nito. What exactly do you want? Paano mo nasabi mainit ako sa Cloudflare? Can you point me to any of my posts saying exactly that?

So cpanel expert ka? Good!

focus ako sa web developing not on cpanel...lol, ikaw po ang feeling maraming alam sa ddos kaya ikaw ang mag-adjust sa cloudflare na gamit ko mr linux expert...

 

[Mr. Stark]

so alin po ba ang totoo?

na confused na ako

Depende kasi sa setup mo yan kung tatablan ka ng isang DoS attack at sa type at volume ng attack na ginamit ng attacker, na-try mo na ba yung ni-suggest na app sa isang reply dito yung xerxes? Gamitin mo si Go0gle marami doon free DoS apps.

 

[danieliazzz]

focus ako sa web developing not on cpanel...lol, ikaw po ang feeling maraming alam sa ddos kaya ikaw ang mag-adjust sa cloudflare na gamit ko mr linux expert...

Hi divinista,
Kindly Hear our Point here;

First, homer_simpson did not in any way told you na "mainit ang ulo niya sa cloudflare", he was just concerned how a simple frontend script you claim can mitigate DoS and DDoS. Which is easily misunderstood, like i am misunderstood on how you explained your terminology.

To answer your question (Linux Shared Hosting DDos)
Yes this occurs and may occur its up to your service provider to provide that protection.

In this thread we respect each other in the community of bwing experts in our own filed so please dont accuse someone of being boastful.

homer_simpson was just trying to understand what you were doing and you failed to provide the proper terminology that is required to understand the situation. DDos and Dos is a serious topic because it raises up the challenge of creating mitigation tools to protect our assets.

divinista, with all due respect please be humble in our community we are here to share and help each other and provide advise on begginers and experts alike.

Also, if you like to learn more about this you may replay and we'll help you understand what you want to know.

Enjoy the Forums

Cheers

 

[homer_simpson]

Look at this posts:

You do not have permission to view the full content of this post. Log in or register now.
You do not have permission to view the full content of this post. Log in or register now.


so if it is really a DDOS (and not a baby DOS), then server mitigations won't help as the volume of traffic is already on your front door. To effectively mitigate: a) you need the help of your ISP at the transit level BEFORE the traffic hits your server; and/or b) CDNs to absorb the volume of traffic for you.

Nginx, iptables, Apache's mod_security and other load balancers can help to some degree BUT can not fully mitigate a large volume DDOS.

 

[danieliazzz]

Look at this posts:

You do not have permission to view the full content of this post. Log in or register now.
You do not have permission to view the full content of this post. Log in or register now.


so if it is really a DDOS (and not a baby DOS), then server mitigations won't help as the volume of traffic is already on your front door. To effectively mitigate: a) you need the help of your ISP at the transit level BEFORE the traffic hits your server; and/or b) CDNs to absorb the volume of traffic for you.

Nginx, iptables, Apache's mod_security and other load balancers can help to some degree BUT can not fully mitigate a large volume DDOS.

I agree, that is why i recommend a hardware firewall instead of Software Mitigations as a tool for mitigation an IDS to be exact as I said Earlier.

Software mitigations will be hopeless at this point.
Even if you have Immunify 360, it wont help you. In this industry Hardware is considered to be most effecting in resolving every situation.

Also most ISP's dont provide Level 3 Firewall that prevents attacts which is sad in many points.

In terms of PFsense, i can agree with you that a simple pfsense hardware can mitigate it. Your hardware must be powerful enough to filter that traffic which is why if you're really wanting to protect your assests you must invest grestly to your pfsense firewall, the larger the horsepower of your pf sense the greater its mitigation potential thru either snort or suricata.

 

[jounin]

ang dami nyong alam fail2ban lang yan ehehe

 

[danieliazzz]

ang dami nyong alam fail2ban lang yan ehehe

Hindi, po uubra ang fail2ban diyan. Ang fail to ban po ay pang excessive logins lang and it will not work sa Dos at DDos since its a diferent set of attack.

 

[Mr. Stark]

Pinapagulo nyo lang yung thread sa mga terms/names na binabanggit nyo na hindi nyo pa naman talaga nauunawaan, need ng thread ay discussion about sa DoS tools para matest ang server nila. In general to protect your server against an attack is huwag mong hahayaang ma-expose ang identity ng main server mo or at least hindi siya accessible outside the infra. Take note din IDS isn't meant to be used to protect against a DoS attack but to prevent/monitor against unwanted access kaya nga "intrusion detection" tsaka hindi yun level 3 firewall kundi layer 3 firewall which is a firewall that works on the network layer, ang tinitingnan nito mga packet na ang laman ay info about IP at yung payload, sa simpleng salita ang concern ng layer 3 firewall is saan galing ang packet. Easyhan nyo lang kasi para maunawaan din ng iba, eh mas nililito nyo lang sa ginagawa nyo eh.

 

[divinista]

Pinapagulo nyo lang yung thread sa mga terms/names na binabanggit nyo na hindi nyo pa naman talaga nauunawaan, need ng thread ay discussion about sa DoS tools para matest ang server nila. In general to protect your server against an attack is huwag mong hahayaang ma-expose ang identity ng main server mo or at least hindi siya accessible outside the infra. Take note din IDS isn't meant to be used to protect against a DoS attack but to prevent/monitor against unwanted access kaya nga "intrusion detection" tsaka hindi yun level 3 firewall kundi layer 3 firewall which is a firewall that works on the network layer, ang tinitingnan nito mga packet na ang laman ay info about IP at yung payload, sa simpleng salita ang concern ng layer 3 firewall is saan galing ang packet. Easyhan nyo lang kasi para maunawaan din ng iba, eh mas nililito nyo lang sa ginagawa nyo eh.

tama po..naging payabangan na po kasi ang nangyari sa amin..hehe,basta ako matutulog ng maaga ngayon...

 

[divinista]

Hi divinista,
Kindly Hear our Point here;

First, homer_simpson did not in any way told you na "mainit ang ulo niya sa cloudflare", he was just concerned how a simple frontend script you claim can mitigate DoS and DDoS. Which is easily misunderstood, like i am misunderstood on how you explained your terminology.

To answer your question (Linux Shared Hosting DDos)
Yes this occurs and may occur its up to your service provider to provide that protection.

In this thread we respect each other in the community of bwing experts in our own filed so please dont accuse someone of being boastful.

homer_simpson was just trying to understand what you were doing and you failed to provide the proper terminology that is required to understand the situation. DDos and Dos is a serious topic because it raises up the challenge of creating mitigation tools to protect our assets.

divinista, with all due respect please be humble in our community we are here to share and help each other and provide advise on begginers and experts alike.

Also, if you like to learn more about this you may replay and we'll help you understand what you want to know.

Enjoy the Forums

Cheers

wala po ako sinabing mainit ang ulo nya sa cloudflare, ibig sabihin ko po sa sinabi ko na mainit sya sa cloudflare e dahil pilit nyang sinasabi na alisin ko ang cloudflare o wag ako gumamit ng cloudflare para sa pagtago ng IP ko,hindi lang naman po yan ang dahilan kung bakit gumagamit ako ng cloudflare,kailangan ko po ang cloudflare dahil madali ang pagsetup ng site mula magkakaibang domain papunta sa iisang server at panibagong server para sa database at para ulit sa panibagong server para sa icons,pinag isa sa tulong ng cloudflare kaya running ng maayos ang site ko na mukhang single server, tagalog po lahat ng sinabi ko dito at wala pong kakaibang terminology akong binanggit...kung may sinabi man po ako na parang nakikipagdeal or naghahamon e gusto ko lang magkaroon ng panibagong challenge sa akin na maapektuhan ang ginawa kong site at setup,mukha po kasing may kaya syang gawin based sa mga sinasabi nya pero puro nakabased lang din sa nabasa at hindi sa naranasan na kaya parang disappointed ako kaya binabara ko na dahil mukhang hindi kayang gawin ang mga sinasabi...nagpang abot lang po talaga kami,nasa kanya po kung mapikon sya...ang pagkakaintindi ko po sa frontend e ang user interface or object na nakikita ng mata ng user at ang backend po ay ang code...pakicorrect po ako kung mali ako...thanks po

 

[homer_simpson]

wala po ako sinabing mainit ang ulo nya sa cloudflare, ibig sabihin ko po sa sinabi ko na mainit sya sa cloudflare e dahil pilit nyang sinasabi na alisin ko ang cloudflare o wag ako gumamit ng cloudflare para sa pagtago ng IP ko,hindi lang naman po yan ang dahilan kung bakit gumagamit ako ng cloudflare,kailangan ko po ang cloudflare dahil madali ang pagsetup ng site mula magkakaibang domain papunta sa iisang server at panibagong server para sa database at para ulit sa panibagong server para sa icons,pinag isa sa tulong ng cloudflare kaya running ng maayos ang site ko na mukhang single server, tagalog po lahat ng sinabi ko dito at wala pong kakaibang terminology akong binanggit...kung may sinabi man po ako na parang nakikipagdeal or naghahamon e gusto ko lang magkaroon ng panibagong challenge sa akin na maapektuhan ang ginawa kong site at setup,mukha po kasing may kaya syang gawin based sa mga sinasabi nya pero puro nakabased lang din sa nabasa at hindi sa naranasan na kaya parang disappointed ako kaya binabara ko na dahil mukhang hindi kayang gawin ang mga sinasabi...nagpang abot lang po talaga kami,nasa kanya po kung mapikon sya...ang pagkakaintindi ko po sa frontend e ang user interface or object na nakikita ng mata ng user at ang backend po ay ang code...pakicorrect po ako kung mali ako...thanks po

...hugas-kamay. Ngayun nagbabait-baitan ka. How many faces do you have?

Meron ba sa mga posts ko na nag-imply ako ng threat at accusation na b0b0 ka? Wala! Sa kabaligtaran, ikaw ang punong-puno ng threats at accusations!

You can believe what you want to believe.

 

[divinista]

...hugas-kamay. Ngayun nagbabait-baitan ka. How many faces do you have?

Meron ba sa mga posts ko na nag-imply ako ng threat at accusation na b0b0 ka? Wala! Sa kabaligtaran, ikaw ang punong-puno ng threats at accusations!

You can believe what you want to believe.

ok utoy...salamat

 

[jounin]

ito maganda ba ito pang protect ng vps na may wordpress site na may cloudflare may conflict din ba to sa cloufdflare
You do not have permission to view the full content of this post. Log in or register now.

 

[auralaura724]

pakiapply po nyan sa panel na ginawa ko kung tatalab..thanks
dreamwap.net

You do not have permission to view the full content of this post. Log in or register now. down

 

[divinista]

You do not have permission to view the full content of this post. Log in or register now. down

try mo iclick check again...mukhang may problema po yang pancheck ninyo..wala na po sa dreamwap.net ang laman ng dating site kundi nailipat ko na sa pisovpn.com nung last week ng september pa dahil sa adsense policy...bale pwede nyo pa rin po itest yung attack nyo sa pisovpn.com , kung sa dreamwap kasi e wala na yung laman...walang kwenta kung walang laman ang itetesting ang security..

 

[auralaura724]

You do not have permission to view the full content of this post. Log in or register now.
2 minutes attack and i have stopped.