4 ms·
> like vps game server hoster from Brazil and so on. Probably someone DDoSing a Minecraft server or something. People in games do this where they DDoS each ot
by sva_ 11mo ago
> like vps game server hoster from Brazil and so on.
Probably someone DDoSing a Minecraft server or something.
People in games do this where they DDoS each other. You can get access to a DDoS panel for as little as $5 a month.
Some providers allow for spoofing the src ip, that's how they do these reflection attacks. So you're not actually dropping the sender of these packets, but the victims.
Consider turning reverse path filter to strict as a basic anti spoofing method and see if it helps
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1
- qwertox 11mo agoThanks, it never came to my mind.
- cute_boi 11mo agoI believe kernel should make this behavior as default.
- jcalvinowens 11mo agoHow does rp_filter on the server side help at all? For a cloud server with a single interface it literally does nothing. Maybe I'm misunderstanding your suggestion.