1. Post #41

    February 2014
    18 Posts
    obvious alts are obvious

    Edited:

    Figure out who's attacking you and take action. Sitting on your ass, blaming server proviers and whining at garry isn't gonna help.

    How is he to do that? Its not like he has direct control of the server. Most of these servers are not dedicated. They do not give you access to the OS. Bottom line is that its a stupid reason to term someone's server.

    Really what needs to happen is they need to find out a better way to prevent some of these attacks. Unfortunately I think most of the current methods are to just flood the servers with UDP traffic which is stateless so its impossible to completely block without upstream assistance. The only way they can fix the problem is to absorb the traffic. That's why NTP reflection and amplification attacks work so well.

  2. Post #42
    But the question is if all GSPs abandon us because we got attacks, how we can provide a server for our community ? We simply cannot.
    If people on the Internet have decided that they will take you down wherever you go, what can anyone hope to do?

    You're trying to solve the wrong end of the problem.

  3. Post #43

    January 2014
    140 Posts
    Hi Luke,

    I do not blame your support, It's was a really good experience (better and faster than Multiplay as I told you).

    But the question is if all GSPs abandon us because we got attacks, how we can provide a server for our community ? We simply cannot.

    And, it's was not a cost issue, I said many times that we can pay extra money for a better service/protection.

    Also, it's was not a game issue we didn't have install any plugins/mods. It's was only DDOS attacks.
    I've already outlined the costs for you. If you're willing to fork over ~1800 USD per month you can achieve the level of protection you desire. Money talks, bullshit makes excuses and continues to cry on forums.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Funny Funny x 1Disagree Disagree x 1 (list)

  4. Post #44
    lollerskates's Avatar
    January 2014
    126 Posts
    a.) Defend against and b.) persecute for.

  5. Post #45

    January 2014
    48 Posts
    obvious alts are obvious

    Edited:

    Figure out who's attacking you and take action. Sitting on your ass, blaming server proviers and whining at garry isn't gonna help.
    How to find a guy who can buy botnet service totaly anonymous ?

    A simple search in google with this keyword "booter ddos"

    Top 10 Booters
    #1: Divine Stresser - http://Divinestresser.com (120GB/seconds)(Skype Resolver)(Stop Button)(Cheapest)(Strongest Ever)(Admin's Choice)

    #2: Minecraft Stresser - http://Minecraftstresser.com (80GB/seconds)(Skype Resolver)(Good Staff)(Powerful)

    #3: Dark Booter - http://darkbooter.com (Up for 2 years)(Good Price)(Great Support)

    #4: IP Stresser - http://ipstresstest.com (Powerful)(Up for 3 years)

    #5: Power Stresser - http://powerstresser.com (Strong Power)

    #6: Titanium Stresser - http://titaniumstresser.net

    #7: DejaBooter Stresser - http://www.dejabooter.com/ (Max Time)

    #8: Legion Booter - http://legion.cm/ (Strong)

    #9: Masterboot - http://www.masterboot.net/ (Hard Hitting)

    #10: Avenge Stresser - www.avengestresser.com/ (Great Price)
    When you don't understand something plz shut up ;)

  6. Post #46
    _Professionals; _Have; _Standards;
    Dennab
    November 2013
    538 Posts
    Ask your GPS For information about the attacks and contact the police. Normally they use these 'Online Stressers' to handle a DDOS attack, as the kids running the attacks are probably too dumb to set up a BotNet or something.
    Reply With Quote Edit / Delete Reply United Kingdom Show Events Agree Agree x 1 (list)

  7. Post #47
    You're sadly, very uninformed on this topic.
    Bro quick fyi. I've written shit like this that can take down servers by exploiting a weaker daemon running or just the server itself.

    Most attacks are NOT launched by a fucking botnet. Botnets are weak and unreliable. Client/Zombie connection speeds fluctuate a lot and they are never online all at the same time. Most of the time attacks are bounced off mis-configured time servers, dns servers etc. They amplify the attack and allow the attacker to go unnoticed. More often services like apache (AKA httpd) are exploited to make them use all the resources and therefor "crash" the server.

    I know how DoS/DDoS's work and I know their variants. They are piss easy to pull off with tools and can be made more powerfull by writing your own tools that combine them.


    Trust me when I say I know my shit when it comes to this sort of stuff. But since he doesn't have access to the box it's hosted on he can't do shit about it.

    Edited:

    How to find a guy who can buy botnet service totaly anonymous ?

    A simple search in google with this keyword "booter ddos"

    When you don't understand something plz shut up ;)
    More often then not booters only use a few bots and either exploit running services (minecraft, web servers etc) or they are just doing a regular old syn attack which can be detected. No way those booters are strong enough to fill the pipe and actually close the victim off of the internet so they rely on either the host/isp to nullroute their ip because an attack was detected.

    Also 120GB/s says nothing about the type of attack. Regular flooding attacks that send junk data (AKA produce a lot of data) are not effective. Syn attacks on the other hand are easy to do and are pretty effective (still not that effective).

    Edited:

    Also 120GB/s would be way bigger then the world record which is 400Gb/s AKA impossible

    http://www.cnbc.com/id/101407999
    https://www.wolframalpha.com/input/?...B%20vs%20400Gb

  8. Post #48
    QNK

    February 2014
    16 Posts
    Ask your GPS For information about the attacks and contact the police. Normally they use these 'Online Stressers' to handle a DDOS attack, as the kids running the attacks are probably too dumb to set up a BotNet or something.
    Police ? ahah, They even know what is a server in France ...

    Again, we do not blame our GSPs for the support, Daemon Servers one was really great.

    But tell us to leave because we make them lose customers .... if every GSPs (only 5 for France and we tried 2 of them so only 3 available for us now) act like this how it's possible to provide a server ?

    Because we know we cannot do anything against these attacks so we probably will be under attack again with our next GSP.

    For our next experience, we think to hide a maximum our IP but if someone want to shit on us he will definitely find it ...
    Reply With Quote Edit / Delete Reply Windows 7 France Show Events Agree Agree x 1 (list)

  9. Post #49

    February 2014
    34 Posts
    I wonder what the terms of renting the server was, as in most cases they can't terminate you because someone directs illegal activity towards your server.

  10. Post #50

    March 2014
    3 Posts
    I wonder what the terms of renting the server was, as in most cases they can't terminate you because someone directs illegal activity towards your server.
    Terms of Service :

    Daemon Servers UK Limited may suspend one or more of your services if it the repeated target of a denial of service attack or similar attack. This policy may be enforced whether it is a direct or indirect result of your actions. In the event of an attack directed at services hosted by Daemon Servers UK Limited on your behalf, your services may be suspended for an absolute minimum of 12 hours and absolute maximum of 48 hours depending on the severity of the attack. If in the period of one month you receive more than 3 attacks we will likely terminate your services with us. In any case of termination, you may be offered a pro-rata refund for the remaining time, but no more.
    Denial of Service Protection.

    Protection against Denial of Service attacks may be offered as an additional extra for some or all of your products and services with us. This protection is not a guarantee that your products or services will not be affected by such attacks. The protection refers to an increased resilience to such attacks, provided that the size of the Denial of Service attack is smaller than that of the bandwidth hosting your products or services. For example, we will guarantee a service on a 1Gbps service against a 350Mbps Denial of Service attack.

    but regrettably, it is the same on all providers ...
    Reply With Quote Edit / Delete Reply Windows 7 France Show Events Agree Agree x 1 (list)

  11. Post #51

    December 2013
    80 Posts
    OP,

    I've been in your shoes before.
    Our community had to fend off an 400Gbps attack which pretty much paralysed the whole datacenter according to our host.

    We got contacted to either pay up for more protection or go away, in a professional manner.
    I now pay a lot more + I have professional cloudflare protection in order to keep going. And it's costing a lot.

    tl;dr - You got to pay for your protection, there is no other way. Even if you have your own serverfiles you'll still be prone to attacks.

  12. Post #52

    May 2011
    305 Posts
    Okay.. You're suffering DDoS attacks, seems quite common to me.

    Here's my advice:

    1) Don't go with either playrust.eu or hfbservers - They have a high DDoS rate and horrible customer support (they'll probably kick you off without even notifying you).
    2) Don't react to the DDoS attacks - The people that are targeting your server love to hear people moan about the DDoS and encourages them to continue. Keep calm about it.
    3) Keep contacting GSP BEFORE purchasing the server - Send them questions regarding anti-ddos and see what they can offer you regarding protection.
    Reply With Quote Edit / Delete Reply United Kingdom Show Events Winner Winner x 1 (list)

  13. Post #53
    Trans genders are gays with mental dis orders
    Dennab
    January 2012
    3,881 Posts
    I don't even understand what the point of attacking a rust server would be.
    Reply With Quote Edit / Delete Reply Windows 7 Canada Show Events Dumb Dumb x 1 (list)

  14. Post #54
    I don't even understand what the point of attacking a rust server would be.
    In this case, to DoS a French-centric Rust server. And some europeans are p damn stupid when it comes to hating the French.

  15. Post #55
    Trans genders are gays with mental dis orders
    Dennab
    January 2012
    3,881 Posts
    that's ridiculously childish, as much as like to make jokes about French Canadians, maxsofs2d, etc who the fuck would actually attack a server or this sort of shit?

  16. Post #56
    QNK

    February 2014
    16 Posts
    I don't even understand what the point of attacking a rust server would be.
    We do not understand too ...

    So guys, Nitrous ? Playrust ? or HFB ? any ideas ?

  17. Post #57
    BMRFMULTIBEAR's Avatar
    November 2013
    155 Posts
    We do not understand too ...

    So guys, Nitrous ? Playrust ? or HFB ? any ideas ?
    Just thought I'd pop in as one of our clients asked about this.

    BMRF offers full protection against any attacks, no exceptions, sadly we only have 1 location at this time.
    Reply With Quote Edit / Delete Reply Netherlands Show Events Optimistic Optimistic x 2 (list)

  18. Post #58
    obvious alts are obvious

    Edited:

    Figure out who's attacking you and take action. Sitting on your ass, blaming server proviers and whining at garry isn't gonna help.
    yeah I'm sure you can stop a botne- oh wait no you can't
    Reply With Quote Edit / Delete Reply United States Show Events Agree Agree x 2Disagree Disagree x 1 (list)

  19. Post #59
    QNK

    February 2014
    16 Posts
    Well, guys we found our new GSP but Rust team, please, add more GSP (maybe a french one ?) :)
    We also add a whitelist.

  20. Post #60

    July 2011
    39 Posts
    yeah I'm sure you can stop a botne- oh wait no you can't
    You can stop botnets with multiple methods, how cost effective and ethical the method's are can be debatable but they'll work.

  21. Post #61
    Gold Member
    CN.Kane's Avatar
    February 2014
    213 Posts
    cost effective
    gameserver
    game
    I would rent a 100 slot server, and pay tops 120$ a month for it, but I want good reliable hardware for 120$ a month. I am renting 2 Servers atm. One 250 Slot, it runs with 50 Slots and one 100 which is down to 30 slots. The servers run smooth, have no issues and are cheap. Too cheap imo.

  22. Post #62
    teamvortex's Avatar
    May 2009
    325 Posts
    Not that I know anything about this but I know a while back there was a big group of French Rust players that DDoS the ulink network library for over a week straight not allowing anyone but white listed French servers to run.

    It was a real pain for the community that this French group made for the WHOLE of the Rust/Facepunch community.

    A lot of people went to war over this and individuals found not only the identity of the French people involved in the DDos but many of their supports who ran white listed servers and egged on the attacks.

    PERHAPS you have someone in your community that brought this upon you.

    Just saying it could be a possibility.

  23. Post #63
    QNK

    February 2014
    16 Posts
    I would rent a 100 slot server, and pay tops 120$ a month for it, but I want good reliable hardware for 120$ a month. I am renting 2 Servers atm. One 250 Slot, it runs with 50 Slots and one 100 which is down to 30 slots. The servers run smooth, have no issues and are cheap. Too cheap imo.
    Money is not a problem for us, a lot of our players want to help us by making donation.

    We got more than 100 actives members, if everyone donate 2€ we can pay much than the currently 30 bucks monthly... Release a GSP less cheaper but responsible with powerfull machine/protection ?

  24. Post #64

    March 2014
    51 Posts
    Hi QNK,

    I've heard about your server through a friend. I wanted to start playing on it and I was on your teamspeak the night of the 1st march (for the wipe).

    It's kinda sad, there is almost no french rust server. Well, active server with competent admins and it's kinda sad for the french community, especially for people who don't really speak english or with a bad internet connection, so I guess it's damaging for the game's french market instead.

    Considering there is no real or cheap solutions against DDoS, I think people should start thinking about other alternatives.

    For instance, I know this would be harmful for you guys considering it would be hard to advertise for your server, but I was thinking of some sort of way to hide your IP on the search list and from your website, and give it to your members (through a free membership for exemple, where you would give the IP to your members, and new members would need someone to vouch for them). Some dev from FP would be required to add the "hide server from search" option but it wouldn't be hard to implement.

    Also, maybe password protected servers which would redirect to your own server after authentication. In this case, even when the "authentication" server is DDoS'ed, people who can connect and pass auth and redirection won't have troubles playing on your server.

    I know this is not really helpful, first because none of those solutions are on your hands (but on FPs), then because there would always be a way for someone who wants to DDoS you to find your server IP, but I'm just trying to think out of the box and give some hints and that's how we should start thinking considering changing GSP doesn't help.

    Also, an extreme solution would be to change you server's/website's name, and maybe change [FR] to [EU]. But as I said, the first solution is a bit extreme, and the second one would prevent french server bashing only.
    Reply With Quote Edit / Delete Reply France Show Events Agree Agree x 1 (list)

  25. Post #65
    Stradosphere's Avatar
    March 2014
    155 Posts
    obvious alts are obvious

    Edited:

    Figure out who's attacking you and take action. Sitting on your ass, blaming server proviers and whining at garry isn't gonna help.
    Yeah,your solution will help us all in no time.

  26. Post #66
    QNK

    February 2014
    16 Posts
    Hi QNK,

    I've heard about your server through a friend. I wanted to start playing on it and I was on your teamspeak the night of the 1st march (for the wipe).

    It's kinda sad, there is almost no french rust server. Well, active server with competent admins and it's kinda sad for the french community, especially for people who don't really speak english or with a bad internet connection, so I guess it's damaging for the game's french market instead.

    Considering there is no real or cheap solutions against DDoS, I think people should start thinking about other alternatives.

    For instance, I know this would be harmful for you guys considering it would be hard to advertise for your server, but I was thinking of some sort of way to hide your IP on the search list and from your website, and give it to your members (through a free membership for exemple, where you would give the IP to your members, and new members would need someone to vouch for them). Some dev from FP would be required to add the "hide server from search" option but it wouldn't be hard to implement.

    Also, maybe password protected servers which would redirect to your own server after authentication. In this case, even when the "authentication" server is DDoS'ed, people who can connect and pass auth and redirection won't have troubles playing on your server.

    I know this is not really helpful, first because none of those solutions are on your hands (but on FPs), then because there would always be a way for someone who wants to DDoS you to find your server IP, but I'm just trying to think out of the box and give some hints and that's how we should start thinking considering changing GSP doesn't help.

    Also, an extreme solution would be to change you server's/website's name, and maybe change [FR] to [EU]. But as I said, the first solution is a bit extreme, and the second one would prevent french server bashing only.
    Hi h4x!

    We decided to hide temporarily our IP and add a whitelist to our server.

    You're always welcome :) You juste need to follow the steps on our website, I will translate them.
    Reply With Quote Edit / Delete Reply Windows 7 France Show Events Useful Useful x 2 (list)

  27. Post #67

    January 2014
    218 Posts
    Nobody is going to like my comment on this, and I'm going to get the standard "It's in Alpha, blah blah" response, but these DDOS attacks would not be happening if the game actually dealt with cheats. By placing the burden of banning cheaters on the admins, you are therefore drawing attention to your server from the people you banned. Sure, if they put in some big silver bullet anti cheating today, we'd see DDOS attacks on servers in protest, but eventually those people would lose interest because that point, they can't play anymore so they'd move on to something they could cheat in.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Disagree Disagree x 1 (list)

  28. Post #68
    BMRFMULTIBEAR's Avatar
    November 2013
    155 Posts
    Not that I know anything about this but I know a while back there was a big group of French Rust players that DDoS the ulink network library for over a week straight not allowing anyone but white listed French servers to run.

    It was a real pain for the community that this French group made for the WHOLE of the Rust/Facepunch community.

    A lot of people went to war over this and individuals found not only the identity of the French people involved in the DDos but many of their supports who ran white listed servers and egged on the attacks.

    PERHAPS you have someone in your community that brought this upon you.

    Just saying it could be a possibility.
    Just as a note, our servers were unaffected by this attack and were also up.

  29. Post #69

    January 2014
    140 Posts
    Just as a note, our servers were unaffected by this attack and were also up.
    You guys never have NYC servers in stock which also have a backorder list, and the Montreal connection has some of the worst ping times in the industry. That's great for you but you don't have the capacity to handle the demand right now.

  30. Post #70

    February 2014
    14 Posts
    If your server is truly this popular whitelist it.

  31. Post #71
    BMRFMULTIBEAR's Avatar
    November 2013
    155 Posts
    You guys never have NYC servers in stock which also have a backorder list, and the Montreal connection has some of the worst ping times in the industry. That's great for you but you don't have the capacity to handle the demand right now.
    https://docs.google.com/spreadsheet/...=sharing#gid=0

    Ping isn't close to as bad as you describe it to be.

  32. Post #72

    January 2014
    140 Posts
    https://docs.google.com/spreadsheet/...=sharing#gid=0

    Ping isn't close to as bad as you describe it to be.
    You're one better than last place, I hope you don't see that as an accomplishment. Additionally, I'm fairly certain I was told that the Montreal location does not have the same protections that the NY location does. My memory could be wrong on this though, but I seem to remember that as a sticking point when I last tried to get a server with you guys. However, any way you look at it you're offering an inferior service with your Montreal location than the NY location for the same price.

  33. Post #73
    BMRFMULTIBEAR's Avatar
    November 2013
    155 Posts
    You're one better than last place, I hope you don't see that as an accomplishment. Additionally, I'm fairly certain I was told that the Montreal location does not have the same protections that the NY location does. My memory could be wrong on this though, but I seem to remember that as a sticking point when I last tried to get a server with you guys. However, any way you look at it you're offering an inferior service with your Montreal location than the NY location for the same price.
    Actually we've phased out the NY location and moved everything to Montreal. Internap didn't provide the colocation quality we desire and our Montreal location has always been better.

    And we don't see that as an accomplishment, but the averages aren't that bad and definitely fall under playable. We fully switched because the other benefits greatly outweigh the 13 average ping difference.

  34. Post #74
    QNK

    February 2014
    16 Posts
    If your server is truly this popular whitelist it.
    This is what we did.

  35. Post #75

    February 2014
    34 Posts
    Terms of Service :

    Daemon Servers UK Limited may suspend one or more of your services if it the repeated target of a denial of service attack or similar attack. This policy may be enforced whether it is a direct or indirect result of your actions. In the event of an attack directed at services hosted by Daemon Servers UK Limited on your behalf, your services may be suspended for an absolute minimum of 12 hours and absolute maximum of 48 hours depending on the severity of the attack. If in the period of one month you receive more than 3 attacks we will likely terminate your services with us. In any case of termination, you may be offered a pro-rata refund for the remaining time, but no more.
    Denial of Service Protection.

    Protection against Denial of Service attacks may be offered as an additional extra for some or all of your products and services with us. This protection is not a guarantee that your products or services will not be affected by such attacks. The protection refers to an increased resilience to such attacks, provided that the size of the Denial of Service attack is smaller than that of the bandwidth hosting your products or services. For example, we will guarantee a service on a 1Gbps service against a 350Mbps Denial of Service attack.

    but regrettably, it is the same on all providers ...
    My legal understanding of the english language is limited, but the first part does not give them grounds to suspend when it's not resulting of any of your actions. Furthermore, the part about "if in the period of one month you recieve more than 3 attacks" is extremely one sided and I would never sign up for such a one sided contract ^^

  36. Post #76

    January 2014
    102 Posts
    Do you guys think its possible to 100% block DDoS attacks by making a script / program that only allows certain IP's to send information to you and block everything else?

    When someone makes an account, say on your own personal website, it auto adds their IP to the list of allowed IP's to server(s).

    I'm sure people would still be able to DDoS your website, but at least your game servers will be safe?
    I'm not sure if this will work, perhaps someone with more extensive knowledge of networks can comment on this?