1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to stop syn flood attack?

Discussion in 'Web Design' started by Zeoxy, Oct 18, 2016.

  1. Zeoxy

    Zeoxy Newbie

    Joined:
    Sep 1, 2016
    Messages:
    9
    Likes Received:
    0
    I get around 100 views a day from instagram to my landing page on my vps. Some dick head is sYN flooding me. How do i stop this?
     
  2. nes22

    nes22 Registered Member

    Joined:
    Feb 23, 2016
    Messages:
    84
    Likes Received:
    10
    Number one is to ban all the ips attacking. Most attacks only work if it ends up using your VPS cpu/bandwidth to send a response back. Very rarely is an attack strong enough to put you down by just sending packets alone. Caching can also help with the CPU load for ips you don't ban.

    If there's thousands of ips then the best thing to do would be to program an autoban feature. If an IP attempts to connect 10-50 times then automatically place it on a list to be banned. If you have Wordpress you can get plugins that do this so it saves time.
     
  3. Zeoxy

    Zeoxy Newbie

    Joined:
    Sep 1, 2016
    Messages:
    9
    Likes Received:
    0
    Thanks. I fixed it! I appears my wordpress was under an xmlrpc attack.
     
  4. living2xl

    living2xl Jr. VIP Jr. VIP

    Joined:
    Dec 9, 2011
    Messages:
    1,618
    Likes Received:
    320
    Occupation:
    Sippin dat juice - Shout it louder!
    Location:
    Not sleeping!
    Home Page:
    change to any goverment agencies nameservers and they will stop faster than you can count to ten
    or simply redirect at the domain level to any site you dont like lol

    do this at your own risk
    this is not very serious
     
  5. tasburrfoot

    tasburrfoot Regular Member

    Joined:
    Dec 16, 2008
    Messages:
    323
    Likes Received:
    152
    https://www.google.ca/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=how to stop syn flood

    Usually now a days with most Datacenters connections/protections it's pretty damn hard to knock a site offline without a massive and dedicated botnet, and pointing that at a guy getting "100 views a day from instagram" would be a gross waste of resources.

    Basically you need to decrease your timeout time's for SYN packets(syn packets wont hang for as long), increase your SYN-Received backlog, and you may need to use SYN cookies as well.
     
  6. Noah Hawryshko

    Noah Hawryshko Senior Member

    Joined:
    Apr 28, 2016
    Messages:
    871
    Likes Received:
    728
    Gender:
    Male
    Occupation:
    Biotechnology Engineer at Silph. Co, Saffron
    Location:
    Kanto
    HAH! I've got to put that in my back pocket for later. Great post.

    OP, you've got to shut off SYN. Just completely shut it off. Take away everything SYN and then let your server operate normally. Then it won't matter if you get flooded with SYN because your server will just ignore everything SYN. It's perfect!

    Who needs SYN anyway? It probably doesn't even do anything important...
     
  7. tasburrfoot

    tasburrfoot Regular Member

    Joined:
    Dec 16, 2008
    Messages:
    323
    Likes Received:
    152
    I'd be careful pointing anything at anything related to the Alphabet Soup. Chances are they won't like that very much, and apparently it's pretty easy to be considered a terrorist these days(especially for foreign nationals).
     
  8. Zeoxy

    Zeoxy Newbie

    Joined:
    Sep 1, 2016
    Messages:
    9
    Likes Received:
    0
    I am confused why such a small site was being attacked. Just seems weird to me. All my traffic is from instagram.
     
  9. Noah Hawryshko

    Noah Hawryshko Senior Member

    Joined:
    Apr 28, 2016
    Messages:
    871
    Likes Received:
    728
    Gender:
    Male
    Occupation:
    Biotechnology Engineer at Silph. Co, Saffron
    Location:
    Kanto
    Well I'll point them to the European alphabet soup then. I'll also send them this meme:
     

    Attached Files:

    • Thanks Thanks x 1
  10. TiagoS

    TiagoS Jr. VIP Jr. VIP

    Joined:
    Jul 5, 2014
    Messages:
    333
    Likes Received:
    152
    Signup for cloudflare free plan . Shall handle it.