DDoS false IP attack

Question

Possible Duplicate:
DDoS attack, how to stop?

I'm getting 10MB attacks, IP spoofing, which is used fake IPs, causing high CPU usage of the machine, and falls all. What should I do to prevent it? Dedicated server configuration: Dual Core 2.8 2GB RAM Uplink 1Gbps Centos. Hug!

Figure out what it is about the attack that's allow that traffic rate to cause high CPU usage and fix it. — David Schwartz, Apr 01 '12 at 01:16

score 2 · Answer 1 · answered Mar 31 '12 at 20:45

2

Contact your ISP and ask them to drop it before it reaches you.

answered Mar 31 '12 at 20:45

Lucas Kauffman

16,818
9
57
92

I've talked with them, they only prevent attacks over 1Gbps – Cristian Augusto Mar 31 '12 at 20:49
I use securedservers.com – Cristian Augusto Mar 31 '12 at 21:06
But how do I protect myself against it within the server? – Cristian Augusto Mar 31 '12 at 21:09
You can't. It's already saturated your link. IPTables to drop/reject the traffic might help, but you'll still be receiving the traffic, so even IPTables will have to use CPU to process the traffic. – Tom O'Connor Mar 31 '12 at 21:15
And a dedicated server, with Quad-Core 2.4 and 8GB of RAM, solve? – Cristian Augusto Mar 31 '12 at 21:56
It won't scale like that. The only cure for a DDOS is your ISP's participation. – Tom O'Connor Mar 31 '12 at 22:10
Like Tom says, there is no other way. – Lucas Kauffman Mar 31 '12 at 22:28

DDoS false IP attack

1 Answers1