[mr_vai]

Thank you, I have read your article, very enthusiastic
But I use win xp to server, not used winserver. So now I have to do???

[C0nw0nk]

Even if you are using windows xp all those settings will work on windows xp, vista, windows 7, etc.

The only thing that changes is windows firewall rules windows xp has a diffrent command for inserting rules and enabling windows firewall it should be the same as windows server 2003 commands anyway.

[Neeeeeeeeeel.-]

Originally Posted by mr_vai Thank you, I have read your article, very enthusiastic But I use win xp to server, not used winserver. So now I have to do???

Why are you using win xp as server?

[mr_vai]

it is a client in my computer system
I ddos, with one ip address to send many packets to the ip of the server port 27 015
Block ip software so effective???

[C0nw0nk]

If it is one computer attacking you then it is DOS not DDoS.

[mr_vai]

10.0.0.24 27015 27015 50.87.38.146 47367 wan1
10.0.0.24 27015 27015 50.87.38.146 6951 wan1
10.0.0.24 27015 27015 50.87.38.146 40743 wan1
10.0.0.24 27015 27015 50.87.38.146 65479 wan1
10.0.0.24 27015 27015 50.87.38.146 32967 wan1
10.0.0.24 27015 27015 50.87.38.146 49415 wan1
10.0.0.24 27015 27015 50.87.38.146 57575 wan1
10.0.0.24 27015 27015 50.87.38.146 33223 wan1
10.0.0.24 27015 27015 50.87.38.146 49671 wan2
10.0.0.24 27015 27015 83.149.48.12 19100 wan1
10.0.0.24 27015 27015 50.87.38.146 33735 wan1
10.0.0.24 27015 27015 50.87.38.146 9767 wan2

I attacked this type
Continuous and attacker fake ip
I used Vigor 2910 series modem firewall but it did not improve the situation

[C0nw0nk]

Well now we have established it is dos you do relise with windows firewall you can just block a ip address.

[mr_vai]

So now I have to do???

[C0nw0nk]

Open up your command prompt and enter the following commands into it.

netsh firewall set opmode enable
netsh firewall set portopening protocol=ALL profile=ALL port=27015 mode=DISABLE scope=ALL addresses=50.87.38.146

That should be it i think also if your server port is not 27015 then change it.

If you are under attack from multiple addresses (DDoS) then simply use the same command but seperate each ip address by a comma (50.87.38.146,83.149.48.12) You can do the same thing for the ports is seperate each port by a comma.

[mr_vai]

I tried your way, but do not improve the situation.
10.0.0.176 27015 27015 188.95.157.67 48582 WAN2
10.0.0.176 27015 27015 188.95.157.67 50118 WAN1
10.0.0.176 27015 27015 188.95.157.67 42470 WAN2
10.0.0.176 27015 27015 188.95.157.67 43238 WAN1
10.0.0.176 27015 27015 188.95.157.67 18886 WAN2
10.0.0.176 27015 27015 188.95.157.67 10982 WAN1
10.0.0.176 27015 27015 188.95.157.67 52678 WAN2
10.0.0.176 27015 27015 188.95.157.67 28454 WAN2
10.0.0.176 27015 27015 188.95.157.67 37126 WAN1
i'm intalls KIS, but do not improve the situation.