Server down?

[Dolalin]

Basically what's being done, by the sounds of it, is a protocol attack on the EQ port of the server machine. So yea, you can't block the DDoS without blocking all legitimate requests.

Unless you have an edge router with whitelisted IP addresses of verified clients, and the rest null-routed. That's the only real option I see here.

If this is being hosted with DDoS proxy protection, it's possible they might allow IP whitelisting on the proxy. I really have no idea. But then that would be a massive task, individually whitelisting all players... jesus I wouldn't wanna think about setting that up, it would take hours.

[Alveus]

Originally Posted by Dolalin [You must be logged in to view images. Log in or Register.]

Basically what's being done, by the sounds of it, is a protocol attack on the EQ port of the server machine. So yea, you can't block the DDoS without blocking all legitimate requests.

Unless you have an edge router with whitelisted IP addresses of verified clients, and the rest null-routed. That's the only real option I see here.

If this is being hosted with DDoS proxy protection, it's possible they might allow IP whitelisting on the proxy. I really have no idea. But then that would be a massive task, individually whitelisting all players... jesus I wouldn't wanna think about setting that up, it would take hours.

This is why i'm saying they could set up some kind of password scheme to throw your ip address on the white list. The bots wouldn't be able to enter the password.

[Dolalin]

Alveus, that's not really feasible unless you want us all to VPN into the server, which would be obnoxious.

No, a proxy whitelist is the only way around this. People would register on the forums and have their subnet whitelisted on the proxy.

[Erik]

As far as a server wipe is concerned, it would definately suck. But if it is a necessary evil so be it. It would be better to start over than to constantly have to deal with the server being down. Hell level 50 doesn't matter much if you cant play.

[Allizia]

Originally Posted by Alveus [You must be logged in to view images. Log in or Register.]

This is why i'm saying they could set up some kind of password scheme to throw your ip address on the white list. The bots wouldn't be able to enter the password.

This would be a massive task complete with daily required maintenance. Some people play from several IPs as well. I'm not even sure it would work even then, as I don't think it's based on successful logins, but attempted log ins