Results 1 to 2 of 2

Thread: iptables stop a DoS attack?

  1. #1

    iptables stop a DoS attack?

    Can iptables really stop a DoS or DDos attack? I'm asking this because I've heard that there really isn't a way to stop a viscious DoS attack. If you find out the IP address of the attacker, you could add a rule such as:
    iptables -I INPUT -s ipaddress -j DROP

    Is it that easy to stop a "packet kiddie"? Or what about a ddos attack that comes from multiple IPs. I guess in that case you could drop an entire class b / class c IP address.

    Also, I heard there is a way to re route those packets so the attacker would be essentially attacking himself. How is this done?

  2. #2

    Re:iptables stop a DoS attack?

    DoS and DDoS can be stopped, but not super easily. lets say they are DDoS'ing you just by sending you massive amounts of data. even if you drop the packets you're still getting that massive amount of data, and you're bandwidth is too small to handle it. the solution is to have someone upstream stop it, like your isp.

    DoS if the ip had enough bandwidth could do the same.

    sometimes DoS aren't done with bandwidth. let's say there is a bug in apache that lets a user throw the server into an infinite loop of new requests, the server is so busy processing those that other (real) users are denied.

Similar Threads

  1. Stop XSS?
    By beezlebubsbum in forum Linux - Hardware, Networking & Security
    Replies: 1
    Last Post: 05-23-2010, 04:42 PM
  2. Attack!
    By jro in forum General Chat
    Replies: 0
    Last Post: 04-11-2005, 05:57 PM
  3. Hey, any ideas on how i can stop this?
    By TeRG in forum General Chat
    Replies: 7
    Last Post: 03-14-2004, 01:18 AM
  4. SCO will pay you to stop using Linux
    By Tyr_7BE in forum General Chat
    Replies: 3
    Last Post: 11-08-2003, 08:11 AM
  5. Nuclear Attack?
    By gmoreno in forum General Chat
    Replies: 6
    Last Post: 06-03-2002, 07:20 PM


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts