Server Down

[choklo]

I just had a thought...

A few days ago I did a complete virus scan and found a trojan horse on my computer. I began to wonder if this could be related to the ddos attack.

Is it possible that the attacker(s) is using players as the bots to take down the server? If so, should we all scan our computers once/day for viruses?

Sorry if this sounds newbish.

[Uaellaen]

i would say get a better virus scaner with realtime protection ... or update your virus databases more often [You must be logged in to view images. Log in or Register.]

[Barkingturtle]

Probably ought to cut down on the porn, too.

Anyway, what a bummer. Good luck getting things back up and going.

[Ceridain]

Originally Posted by gobbles [You must be logged in to view images. Log in or Register.]

Did the people ddossing ever talk to Rogean? What will it take for them to stop?

Manastones... lots and lots of 'em. Oh and a full set of Rubicite

[Crover_CT99]

http://www.fohguild.org/forums/mmorp...alled-105.html

Friend of a banned item-duper, apparently.
Always seemed the most likely scenario considering the timing.

[Mezzimus]

Yes Rogean was contacted.

The DDoSer contacted me directly and told me he was doing it this time because of us banning his friend for abusing a dupe exploit.

He posted that on the FoH boards.



Edit: Crover beat me to it!

[Finawin]

Fuck him, he can't keep it going forever.

[Cryptwalker]

What a loser, yeah, fuck him, the 1999 team fix this and we can go on playing.

[callemosen]

1 - HUGE thanx to all the people involved in running this server, keep up the good work!
2 - Im sure the retard who's attacking the server isn't reading this forum anyway, so any elaborate insults feel like a waste of bandwidth. Bottom line is they can only DDoS the server, not the community!
3 - DDoS protection isnt rocket science, just abit upscale for a volunteer project like this. I realize it's impossible to go out and "ask" for money to protect against it, without drawing SoE's attention, and going into a more expensive solution without knowing there will be money to pay for it must be a hard choice to make.
I hope you find a way to keep the server running, in the meantime i'll make a donation for the fun time i've had so far =) =)

\\Vild

[cadiz]

Originally Posted by Sponge [You must be logged in to view images. Log in or Register.]

Wouldn't you just get the IP(s) of a zombie computer? Gonna go attack some innocents?

In this case probably not, I'd wager that it was a few people with personal issues. Botnet or not I'd imagine they could at least rate limit UDP to some acceptable level either at the core/dist switch of the colo or the trunk/vlan where the stuff is hosted from, a fairly standard practice in routing and switching.

Most co-location providers will cooperate with you on this if you have packet traces and a list of offenders.

According to Rogean most of the abuse traffic is UDP which makes it tricky, otherwise you could just dedicate a cheap machine to proxy your TCP connections for you, discarding illegitimate traffic.