+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Networking (https://sinister.ly/Forum-Networking)
+--- Thread: getting DDoSed (/Thread-getting-DDoSed)
RE: getting DDoSed - Cryogenica - 08-05-2018
(08-05-2018, 11:08 PM)l33t Wrote:(07-06-2018, 11:44 AM)mothered Wrote: I haven't sifted through each and every post, but have you performed a factory reset on your router? Also, If your router has a built-In firewall, you can define security rules and filter Incoming traffic to block the attack.
If you're running a dynamic IP, It's strange that multiple reboots didn't assign a new one.
(08-05-2018, 10:16 PM)Cryogenica Wrote:(08-05-2018, 09:54 PM)l33t Wrote: I will demand to speak to a manager the next time I call them, last time I asked to speak to a higher up the lady hung up on me so I hope it'll go better the next time around.
Don't most booters have thousands of different bots that send packets, if 1 gets blocked I'm sure it won't achieve a lot.
Yes, most use many different bots. That's actually the difference between DDoS and DoS (DDoS uses multiple bots, while DoS uses only one).
If, though, you limit them to 3 connections / munite (like I said above), you will notice an initial drop in network speed (assuming the bots come online at exactly the same time, but after a sizable amount of bots get blocked, all you need to do is hold off any new ones that come online to replace the old ones. No bot will send more than 3 connections worth of data, which isn't actually much even for a large botnet, since they get disconnected almost immediately. This basically reduces it from at any given moment a large DDoS attack to maybe a few DoS attacks. And DoS attacks are pretty easy to block.
Yes sadly my ISP doesn't allow for that much customisation with my modem.
It wouldn't be your modem you customize, it would be your router. Nevertheless, some modems do double as routers. Perhaps that's the case for you?
If you do have a separate router, you should install DD-WRT (or some WRT variant), assuming it's compatible, or if it's not compatible, I'd recommend getting a router that is.
But, of course, if your modem and router are the same unit, I have to agree with other comments that you're pretty much screwed until you get a new router.
But there is another way. Usually the ISP reserves your IP for either 24, 48, or 72 hours. If you can go with internet for that long (I'd add at least an hour padding, as well) you should be able to get a new IP address. If that doesn't work, you probably have a static IP so you would need to either get a new router, or if that doesn't work you might even have to get a new internet plan.
RE: getting DDoSed - l33t - 08-06-2018
(08-05-2018, 11:14 PM)Cryogenica Wrote:(08-05-2018, 11:08 PM)l33t Wrote:(07-06-2018, 11:44 AM)mothered Wrote: I haven't sifted through each and every post, but have you performed a factory reset on your router? Also, If your router has a built-In firewall, you can define security rules and filter Incoming traffic to block the attack.
If you're running a dynamic IP, It's strange that multiple reboots didn't assign a new one.
(08-05-2018, 10:16 PM)Cryogenica Wrote: Yes, most use many different bots. That's actually the difference between DDoS and DoS (DDoS uses multiple bots, while DoS uses only one).
If, though, you limit them to 3 connections / munite (like I said above), you will notice an initial drop in network speed (assuming the bots come online at exactly the same time, but after a sizable amount of bots get blocked, all you need to do is hold off any new ones that come online to replace the old ones. No bot will send more than 3 connections worth of data, which isn't actually much even for a large botnet, since they get disconnected almost immediately. This basically reduces it from at any given moment a large DDoS attack to maybe a few DoS attacks. And DoS attacks are pretty easy to block.
Yes sadly my ISP doesn't allow for that much customisation with my modem.
It wouldn't be your modem you customize, it would be your router. Nevertheless, some modems do double as routers. Perhaps that's the case for you?
If you do have a separate router, you should install DD-WRT (or some WRT variant), assuming it's compatible, or if it's not compatible, I'd recommend getting a router that is.
But, of course, if your modem and router are the same unit, I have to agree with other comments that you're pretty much screwed until you get a new router.
But there is another way. Usually the ISP reserves your IP for either 24, 48, or 72 hours. If you can go with internet for that long (I'd add at least an hour padding, as well) you should be able to get a new IP address. If that doesn't work, you probably have a static IP so you would need to either get a new router, or if that doesn't work you might even have to get a new internet plan.
My modem/router are indeed 1 unit and I unplugged my entire internet for a whole week and still no new IP, guess I'm screwed.
RE: getting DDoSed - Cryogenica - 08-06-2018
(08-06-2018, 12:57 AM)l33t Wrote:(08-05-2018, 11:14 PM)Cryogenica Wrote:(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
It wouldn't be your modem you customize, it would be your router. Nevertheless, some modems do double as routers. Perhaps that's the case for you?
If you do have a separate router, you should install DD-WRT (or some WRT variant), assuming it's compatible, or if it's not compatible, I'd recommend getting a router that is.
But, of course, if your modem and router are the same unit, I have to agree with other comments that you're pretty much screwed until you get a new router.
But there is another way. Usually the ISP reserves your IP for either 24, 48, or 72 hours. If you can go with internet for that long (I'd add at least an hour padding, as well) you should be able to get a new IP address. If that doesn't work, you probably have a static IP so you would need to either get a new router, or if that doesn't work you might even have to get a new internet plan.
My modem/router are indeed 1 unit and I unplugged my entire internet for a whole week and still no new IP, guess I'm screwed.
Then your last chance would probably be to buy a new one or get a new internet plan, depending on your ISP. Or you could see if the attacks stop coming eventually, but that might not happen for months to years.
RE: getting DDoSed - mothered - 08-06-2018
(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
For this reason, I always purchase a modem/router that's supported by my ISP. As such, they have no excuse to not go through the configuration and steps to solve a given Issue.
Years ago, I did the mistake of buying an unsupported modem and they said "we can't help you, contact the manufacturer".
RE: getting DDoSed - Vultra - 08-06-2018
(08-06-2018, 04:06 AM)mothered Wrote:(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
For this reason, I always purchase a modem/router that's supported by my ISP. As such, they have no excuse to not go through the configuration and steps to solve a given Issue.
Years ago, I did the mistake of buying an unsupported modem and they said "we can't help you, contact the manufacturer".
That's bit shitty. We've never encountered this type of issue with a router that isn't from the ISP.
RE: getting DDoSed - mothered - 08-06-2018
(08-06-2018, 04:29 AM)Mimiakira Wrote:(08-06-2018, 04:06 AM)mothered Wrote:(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
For this reason, I always purchase a modem/router that's supported by my ISP. As such, they have no excuse to not go through the configuration and steps to solve a given Issue.
Years ago, I did the mistake of buying an unsupported modem and they said "we can't help you, contact the manufacturer".
That's bit shitty. We've never encountered this type of issue with a router that isn't from the ISP.
I know, I couldn't believe It when I was told to call the manufacturer.
My equipment Is now supported by my ISP, so they have to troubleshoot all technical Issues.
RE: getting DDoSed - l33t - 08-08-2018
(08-06-2018, 04:06 AM)mothered Wrote:(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
For this reason, I always purchase a modem/router that's supported by my ISP. As such, they have no excuse to not go through the configuration and steps to solve a given Issue.
Years ago, I did the mistake of buying an unsupported modem and they said "we can't help you, contact the manufacturer".
No, everything that has to do with internet is provided by my ISP, my modem and everything was provided by them. What I meant was that they don't allow us to customize it a lot.
RE: getting DDoSed - Num5kull - 08-08-2018
If to get a better modem working try backing up your router config and viewing it in a text editor and copy the settings to new unsupported hardware. Some router config backups are encrypted or in binary format so if you have an old modem that works with the connection try a config back up confignfrom that. Older modems save in cleartext allowing for copying or editing. I got free internet for a month by messing with this stuff so is well worth a look
RE: getting DDoSed - mothered - 08-08-2018
(08-08-2018, 03:40 PM)l33t Wrote:(08-06-2018, 04:06 AM)mothered Wrote:(08-05-2018, 11:08 PM)l33t Wrote: Yes sadly my ISP doesn't allow for that much customisation with my modem.
For this reason, I always purchase a modem/router that's supported by my ISP. As such, they have no excuse to not go through the configuration and steps to solve a given Issue.
Years ago, I did the mistake of buying an unsupported modem and they said "we can't help you, contact the manufacturer".
No, everything that has to do with internet is provided by my ISP, my modem and everything was provided by them. What I meant was that they don't allow us to customize it a lot.
All the more reason they should handle the Issue on their end, and configure It on your side thereafter.
In essence, you're paying for a service they're failing to provide. How they can justify themselves Is beyond comprehension.
RE: getting DDoSed - Suiziide - 08-08-2018
Hmm I just read through the thread, and I just have to ask, what makes you so sure that you are being ddos'ed?
I know other people have asked, but you just keep saying "I know I am, I am sure of it!"
Pretty sure people would like to know what it is that makes you so sure of it?
Also, just to troubleshoot, where do you go to check if your external ip has been changed? I mean what service do you use to lookup your ip?
Also as a sidenote, you say you have a combined modem and router, but it is possible to put these "ISP routers" in bridge mode, so it only functions as a modem, and then put your own router behind it.