Server Down

[cadiz]

Rogean, get us some IP addresses from a packet trace and I am sure some of us would be happy to address the threat(s) in other ways. Can the colo also not block some of them at the core/edge as it's obviously abuse?

[Sponge]

Wouldn't you just get the IP(s) of a zombie computer? Gonna go attack some innocents?

[Finawin]

Originally Posted by Vyal [You must be logged in to view images. Log in or Register.]

Linux can't compete with anything windows can do the windows server are sooo much more trust worthy and the security is better.

Sorry I don't want to get into that with you alot of hard heads out there like linux but i'm not one of them.

L
O
L

What a fucking moron.

[Sponge]

obvious sarcasm from Vyal

[maultar]

Seems we are talking to a brick wall. They said a week to 2 weeks, must already have a plan. Back to cleaning up and working out I suppose.

[Ferok]

Originally Posted by Vyal [You must be logged in to view images. Log in or Register.]

Linux can't compete with anything windows can do the windows server are sooo much more trust worthy and the security is better.

Sorry I don't want to get into that with you alot of hard heads out there like linux but i'm not one of them.

ROFL

Wow, that couldn't be more wrong. I work in a windows shop, and I'm generally a windows fan. I love many microsoft products and I there are places where linux simply cannot compete.

Visual Studio, especially with Team Foundation Server, is an absolute beast of a product.

The whole Exchange / Outlook / Communicator suite, and how it integrates with the rest of the office suite, is an undeniable force in the business world.

MS SQL server, and the associated tools, are well worth the premium. Sorry MySQL fans, but the tools suite just make development on MS way easier, and administration is simplistic in comparison. I say this as I watch an oracle database choking on the creation of a massive CSV file, on my other screen.

Security has gotten better with Windows, for damn sure. But at least partially because Microsoft has such a huge target on them, there are way more exploits for Windows. It's much, much easier in general to hack a Windows server, than a Linux server. Believing anything else, boy, you're really just not with the times.

I realize you're a troll, so I realize how futile it is arguing with you. The point of this is to simply announce how completely clueless you are, so others won't possibly think there's something else coming off your fingers that's worth listening to.

[Kaleb]

Don't you wish we could play right now?

I do

[Lyrren]

Strangely enough most of you (sorry, but I'm including you Rogean here) seem to be assuming that the person undertaking this attack has a personal beef against the server, this seems highly unlikely. Your average EQ Classic player would not have a personal botnet army at his disposal ready to launch a DDoS attack the moment his character got banned.

Ok it's not impossible, but as I said highly unlikely.

What is much more likely is that some highly antisocial individual is trying to pick an easy target he can attack, some target which has minimal resources with which to respond, that target is us. He wont attack a commercial enterprise because he is too afraid of the repercussions.

Currently he is bragging to his hacker mates that he has forced the Project1999 server offline (sorry Rogean, you are caught between a rock and a hard place here). It doesn't really matter who or what Project1999 is, Project 1999 has become a victim of its own success. If we didn't care then his attack would have no value and he would quickly move on to another target.

So what to do?

Unless you have a foolproof plan with which to effectively combat these DDoS attacks, put the server back online. If he cannot claim to have forced the server offline then you remove the purpose of his attacks. Eventually he will get bored, much sooner than your loyal EQ classic players. For a week, maybe two weeks, playing on the server will be unpleasant, but those who care will remain and after that he will be gone.

But the longer you keep the server offline, the longer he will continue his attack, and possibly his hacker friends will join in (if they haven't already).

[maultar]

How much can some appliance be for firewall? F5 or whatever? Gotta be a simple fix otherwise companies all over would have this grief.

[Bentheb]

Originally Posted by Lyrren [You must be logged in to view images. Log in or Register.]

Strangely enough most of you (sorry, but I'm including you Rogean here) seem to be assuming that the person undertaking this attack has a personal beef against the server, this seems highly unlikely. Your average EQ Classic player would not have a personal botnet army at his disposal ready to launch a DDoS attack the moment his character got banned.

Ok it's not impossible, but as I said highly unlikely.

What is much more likely is that some highly antisocial individual is trying to pick an easy target he can attack, some target which has minimal resources with which to respond, that target is us. He wont attack a commercial enterprise because he is too afraid of the repercussions.

Currently he is bragging to his hacker mates that he has forced the Project1999 server offline (sorry Rogean, you are caught between a rock and a hard place here). It doesn't really matter who or what Project1999 is, Project 1999 has become a victim of its own success. If we didn't care then his attack would have no value and he would quickly move on to another target.

So what to do?

Unless you have a foolproof plan with which to effectively combat these DDoS attacks, put the server back online. If he cannot claim to have forced the server offline then you remove the purpose of his attacks. Eventually he will get bored, much sooner than your loyal EQ classic players. For a week, maybe two weeks, playing on the server will be unpleasant, but those who care will remain and after that he will be gone.

But the longer you keep the server offline, the longer he will continue his attack, and possibly his hacker friends will join in (if they haven't already).

The problem with this, as it has been stated before in this thread is, the bandwith spikes cost the devs money.

no clue how much a dos attack ends up ends up costing them but when the attacker stopped doing just short bursts and went all out im sure it started adding up fast.

So there really is no practical way for them to do this.