4 ms·
Why not just temporarily blacklist the IP's and ignore all traffic from them when you detect the DDOS?
by bitmapbrother 10y ago
Why not just temporarily blacklist the IP's and ignore all traffic from them when you detect the DDOS?
- icebraining 10y agoUsually there are many IPs popping in and out, and it's often hard to tell them apart from regular clients. Also, you still have to receive the traffic even if you then ignore it; if your pipe is smaller than the attacker's, it may be enough to overwhelm you.
- whorleater 10y agoDDOS is exactly that: a Distributed Denial of Service attack. In other words, there's thousands of IP's popping in and out performing a variety of denial of service attacks, so it's not really a one block and done type deal.