DDoS

[Takshaka]

Originally Posted by Auvdar [You must be logged in to view images. Log in or Register.]

I died before the DDoS attack, like by 2 minutes.... can I still get a rez if I beg really really hard? <puppy eyes>

telling the truth is for suckers

[cassaruby]

can't get through eqemu login now

[Jify]

Shucks. 8(

[Takon]

Another major DDoS at 1:50ish CST. I know I'm dead.

Noticed the server is off the login screen again...

[cadiz]

Have you guys thought about implementing something like a SYN proxy like what OpenBSD's PF offers?

This would basically proxy your TCP handshakes, allowing you to set thresholds and discard bad packet and requests (or not respond to them all together).

http://www.openbsd.org/faq/pf/filter.html#synproxy

TCP/5998 ---> <openbsd pf box> ---> eq server

Furthermore, you could inspect packet headers with SPI but this would be a bit cpu intensive.

Just an idea, it may not be feasible given your resources (additional machine/staff know-how/ease of setup). I've used OpenBSD PF with great success in many enterprise scenarios, you can even use 'CARP' to load balance among several firewall nodes.

http://www.openbsd.org/faq/pf/carp.html

[schwindler]

I think Blink and his guild is behind the DDOS. I wish they would stop it

[Brad_mo123]

Yeah, died in Uguk from lag (Giganto) and then finally server went down, well not finally pretty quickly.

[RupesTZ]

Server down as a result of DDoS?

[Estharik]

why the hell is this the only server that seems to be under attack 24/7? there's lots of 0 pop servers on the screen why not attack one of those and get it off the list when we try and log in... do something useful if you're going to attack someone at least.

[Majik]

DDoS terrorist getting smarter?