DDOS attack

Question

Level 1

117 points

DDOS attack

right now/all afternoon (11-12) i have been hit with a Distributed Denial of service attack (i have collected IP addresses from all over the world)

arrrrgh, very frustrating

besides changing the IP address of my mail server which would take days to do and then more to rebuild dns, what can i try to stop the flood?

MacPro 3 GHz Dual-Core Intel Xeon, Mac OS X (10.5.7), 5GB RAM

Posted on Nov 12, 2009 2:43 PM

Reply

Answer 1

Mac Admin Author

Level 1

117 points

Nov 12, 2009 3:00 PM in response to Mac Admin

i should probably note that the server is running 10.5.8 with all updates

Reply

Answer 2

MrHoffman

Level 10

149,389 points

Nov 12, 2009 3:39 PM in response to Mac Admin

What's the DDoS aiming at? (Ensure that the server here is not an open relay for instance, and what you're seeing here is not just malware relaying spam or other such traffic through your server.) After that, there's not much you can do for a DDoS short of aiming your MX elsewhere or adding bandwidth and servers or otherwise just waiting out the DDoS, and this presumes your DNS time to live values are set short enough to allow you to move your entries more quickly, and a block of previously dark IP addresses to move into. Work with your upstream provider.

Reply