Ddos on server
 

Hey there,
My server is facing heavy ddos attacks regularly. I managed to capture traffic with tcpdump. Please could someone analyse and get a solution please. IPTABLES rule maybe?
https://mega.nz/#!IcE1CCKR!pBVIbon-V...I47mnE5UdfdVoQ

Re: Ddos on server
 

This must go to off topic sec.
Have you tried contacting the host provider? They MUST take this case over.

Re: Ddos on server
 

Host takes toooooooo much extra money for ddos protection. And the imp thing is my bandwidth wasnt overloaded still everything was down...

Re: Ddos on server
 

It means it`s time to switch the host providers.

Re: Ddos on server
 

No ddos protected host here. Since the bandwidth wasnt flooded I think if correct iptables rules are put (for which I'm asking help) it could prevent the attack or atleast decrease

Re: Ddos on server
 

Why not just try CloudFlare?

Re: Ddos on server
 

Cloudflare is only for websites as far as I know.

Re: Ddos on server
 

Yep, you're right, they support only HTTP/S. Guess you have to switch to a new host.

Re: Ddos on server
 

OVH , check their Website

Re: Ddos on server
 

If the attack don't overload your connection but affects your HLDS stability, you could try filtering using iptables.
As I see your capture, they're using more than 5k bots doing A2S_INFO attack.
Best thing you can try is to rate-limit A2S_INFO packets to avoid high cpu usage on your hlds.


Any action you may take on the server could not stop nor avoid connection overload.