Announcements: After a violent DDoS attack, we're back online !

[redhat]

Hi Members,

as you all noticed we were offline for the last few days. At the end of last week we had a heavy DDoS attack on our web server.
It was a Layer 7 DDoS attack (SYN flood DDoS attack). The hundreds of thousands of simultaneous requests to the web server led to a server overload.

During this time I tried some solutions, some were less good, others were overpriced. I have to admit that I still haven't found a solution that I really like 100%

As a temporary solution, I chose Cloudflare. I would like to get rid of a third party provider as completely as possible and would actually like to have good DDoS protection running locally on the web server.

I would also like to hear tips from you, maybe you also have experience in this regard.

 

[Starkey]

Hi Members,

as you all noticed we were offline for the last few days. At the end of last week we had a heavy DDoS attack on our web server.
It was a Layer 7 DDoS attack (SYN flood DDoS attack). The hundreds of thousands of simultaneous requests to the web server led to a server overload.

During this time I tried some solutions, some were less good, others were overpriced. I have to admit that I still haven't found a solution that I really like 100%

As a temporary solution, I chose Cloudflare. I would like to get rid of a third party provider as completely as possible and would actually like to have good DDoS protection running locally on the web server.

I would also like to hear tips from you, maybe you also have experience in this regard.

glad to see we are back online

 

[redhat]

Update:
There are still issues with sending mail, cureently no mails will be sent.

 

[dtblocker]

I'm glad you're back again.
Cloudflare, which is used as a third party here, is the method used by many large companies.
For a more secure server security, it is 500gb and 1tb protection offered by data centers against ddos attacks.
No matter how much security you have made from inside the server, you can only block some of the attacks.
If the server belongs to you, of course, there are a few actions to be taken, if there is no need to discuss it with the provider.
If you do not want to use Cloudflare, as I said, you should either use a clod server and have the necessary security software in it, or rent a server with ddos protection from a good datacenter.
I hope you will not experience the same problems again.
Because it makes us sad that the forum is closed.
Kind regards.

 

[cookie121]

i wonderd what was going on couldnt get on here for a few days glad its back now

 

[elaygenov]

Am so happy your online again, I was worried , now, am happy to see all members here again. ?
????

 

[cookie121]

im still having trouble loggin in sometimes its lets me on sometimes it dont

 

[redhat]

im still having trouble loggin in sometimes its lets me on sometimes it dont

Sorry about it, i think this is related with the FW Rules

 

[besir31]

Hi Members,

as you all noticed we were offline for the last few days. At the end of last week we had a heavy DDoS attack on our web server.
It was a Layer 7 DDoS attack (SYN flood DDoS attack). The hundreds of thousands of simultaneous requests to the web server led to a server overload.

During this time I tried some solutions, some were less good, others were overpriced. I have to admit that I still haven't found a solution that I really like 100%

As a temporary solution, I chose Cloudflare. I would like to get rid of a third party provider as completely as possible and would actually like to have good DDoS protection running locally on the web server.

I would also like to hear tips from you, maybe you also have experience in this regard.

Hello,
My server is from OVH and have
DDoS protected rent your servers from OVH
Kind regards.

 

[go13]

Hi !

To view the content, you need to Sign In or Register.

 

[jose123]

Hello,
My server is from OVH and have
DDoS protected rent your servers from OVH
Kind regards.

And do you think this is free? We have to help the forum if we want to continue using it, but when it comes to helping everyone runs, the forum helps us a lot!

 

[superadeel]

Hello,
My server is from OVH and have
DDoS protected rent your servers from OVH
Kind regards.

I have a bad experience with OVH servers in terms of the work we do. As they over respond to the DMCA and other kind of notices and shut down the service in a short term notice.

Regards

 

[besir31]

I have a bad experience with OVH servers in terms of the work we do. As they over respond to the DMCA and other kind of notices and shut down the service in a short term notice.

Regards

I use proxy
nothing happens

 

[superadeel]

I use proxy
nothing happens

which proxy server do you use on top?

 

[redhat]

Hi !

No quote

Thanks mate for your recommendationi, but i have already running WAF on the Server where many rules already active and running. Unfortunately, that didn't help very much. It was very heavy DDoS Attack with 1.25 Billion requests in 24 h:

 

[abelcustoms]

change IP, stick with cloudflair, activate ddos protection so it can verify make everything hit https. and add a proxy in between so the dummy server will show.

Thanks mate for your recommendationi, but i have already running WAF on the Server where many rules already active and running. Unfortunately, that didn't help very much. It was very heavy DDoS Attack with 1.25 Billion requests in 24 h:

 

[redhat]

change IP, stick with cloudflair, activate ddos protection so it can verify make everything hit https. and add a proxy in between so the dummy server will show.

Yes, i try it. I had issues with SSL and do you have also idea how i should handle smtp ?

 

[abelcustoms]

use a 3rd party for SMTP never use your own server to send mail. Mxroute is a good alternative and cheap. The search engine says they are going directly to your server, bypassing the domain name. Even Cloudflare cant help you on this one. Change your IP address if you haven't and get Cloudflare working it's your best bet to get out of this mess. I think you know what you need to do. SSL issues can be solved by waiting and checking on a different browser. Change all your settings to port to HTTPS not HTTP else you will get an endless redirect loop. Have CloudFlair manage your DNS Settings. So reset your DNS settings to point to Cloudflare from Plesk. I honestly prefer CPanel for this reason as it configures it much better. They also have better security, even though 80% of customers in europe use Plesk.

Yes, i try it. I had issues with SSL and do you have also idea how i should handle smtp ?

 

[dtblocker]

I don't understand why people attack somewhere.
If there is anything we can do for our forum, we will gladly do it.
I hope we don't have these problems again.
It's a shame that the forum is closed.

 

[Kenxo]

I am 100% sure the attack is from someone that has been baned ..

I don't understand why people attack somewhere.
If there is anything we can do for our forum, we will gladly do it.
I hope we don't have these problems again.
It's a shame that the forum is closed.