DDoS Issue Solution - Rust - Facepunch Forum

So it's clear that the servers are being DDoSsed, hide it or try to deny it, it's pretty clear that they're being under DDoS. I am going to offer a simple solution, which might prevent it, or actually even completely stop the DDoSing issue. Maybe if the question comes up to you - Why in the world I would even read or trust this guy? Well first let me tell you that I've been working with DDoS and with Anti-DDoS for quite some time now, if not to lie somewhere around 5 years. Getting a DDoS protection which "stops/mitigates DDoS" for a server is way too costly (around $2.000-$5.500, all depends on a size of DDoS attack). So the only possible solution ATM. is just to prevent it. Now how to do it? Simple: a) Remove server IP Address and PORT information on web browser URL bar (That just asks to get DDoSed) b) After removing IP Address information on web browser url bar, make all the servers to change their IP Address. Why? Because what's the point of hiding IP, if the guy who is sending DDoS attack knows the IP already? Thanks for reading. Feel free to post any comments or questions. P.S. Sorry for my English grammar. English is my 3rd language.

This. Thank you.

.............................

Not displaying the IP in the URL doesn't hide it, it's very simple to find IP using other websites or pinging it.

[QUOTE=KermitTheFrog;42591579]Not displaying the IP in the URL doesn't hide it, it's very simple to find IP using other websites or pinging it.[/QUOTE] Yes, true. But it actually takes some skill and research. Simple solution can even stop the current ddosers, if he doesn't know how to get IP in other ways. P.S. Thank you for responses. Want to get more responses so that Rust game/Website developers could see it.

[QUOTE=EMCSquared;42591586]Yes, true. But it actually takes some skill and research. Simple solution can even stop the current ddosers, if he doesn't know how to get ip in other ways. P.S. Thank you for responses. Want to get more responses so that Rust game/Website developers could see it.[/QUOTE] If he knows how to DDoS, chances are he knows how to find an IP.

[QUOTE=KermitTheFrog;42591607]If he knows how to DDoS, chances are he knows how to find an IP.[/QUOTE] In the current world you don't need any skill to ddos. You just go to certain websites, or just type certain thing in google search, you open up the website, pay few bucks, enter ip, port and whoalia process is done.

Load up Rust Start Run cmd net stat Oh, look, there we go.

To the post above ^ Netstat doesn't actually work, but still would recommend removing the post. Btw, that's 1 out of 1000 ways to get it it.

[QUOTE=EMCSquared;42591611]In the current world you don't need any skill to ddos. You just go to certain websites, or just type certain thing in google search, you open up the website, pay few bucks, enter ip, port and whoalia process is done.[/QUOTE] If you can look up how to DDoS, you can look up how to find an IP lmao

[QUOTE=KermitTheFrog;42591683]If you can look up how to DDoS, you can look up how to find an IP lmao[/QUOTE] You simply give too much credit to the guy. I'm giving you 90% of the chance that the dude doesn't know how to. Anyone who is in ddosing stuff seriously, wouldn't ddos a game server which is in alpha version.

[QUOTE=EMCSquared;42591701]You simply give too much credit to the guy. I'm giving you 90% of the chance that the dude doesn't know how to. Anyone who is in ddosing stuff seriously, wouldn't ddos a game server which is in alpha version.[/QUOTE] And you give people too much credit, they have their reasons, big or small, anyone could do this.

[QUOTE=KermitTheFrog;42591746]And you give people too much credit, they have their reasons, big or small, anyone could do this.[/QUOTE] True, but I'm just giving my 2 cents, since I have experience with it and against it. Just want to help out, so all this ddosing bs would stop.

Hey good simple idea for the time being

finding the ip address of the servers will not take but a few seconds even if its not in the url not a hard task. unless the guy is buying a botnet and having them do he will most likely know how to find the new ip of a server

Its actully quite simple to stop DDoS attacks witch suprises me that they havnt stoped already

How about this: We just don't post about this and let the DDoS-ers realize that they aren't bothering us and they'll stop. I mean they might keep DDoSing if we "feed the trolls" as people say.

Hiding the IP from the URL bar does nothing because you can use wireshark to find the IPs really easily...

But Garry should fix the IP thing. Let's all just wait it out and not complain I'm saying.

[QUOTE=OPGFrogger;42591968]Its actully quite simple to stop DDoS attacks witch suprises me that they havnt stoped already[/QUOTE] I don't believe you've been "in the anti-DDoS" for 5 years. Removing the IP address would stop fools from not seeing the server IP address, you're connected to it, you're sending data to and receiving from the server, you are exposed to the server's IP address, and that's all the attacker needs to find the IP address/port. You have no idea the characteristics of the attack, so you have no right to say "quite simple to stop DDoS attacks".

[QUOTE=bru;42592004]I don't believe you've been "in the anti-DDoS" for 5 years. Removing the IP address would stop fools from not seeing the server IP address, you're connected to it, you're sending data to and receiving from the server, you are exposed to the server's IP address, and that's all the attacker needs to find the IP address/port. You have no idea the characteristics of the attack, so you have no right to say "quite simple to stop DDoS attacks".[/QUOTE] ^ Exactly what I meant in my last few posts. P.S. I don't want this thread to turn into flame wars, or whoever knows more about DDoS/Anti-DDoS more. I just wanted to give my 2 cents, on how to at least help out a little bit against DDoS.

I agree that a DDOS is much more complicated, and perhaps the game isn't at the point where a solution like Akamai would be realistic yet to combat it. At some point though, I envision this being part of the package, and I would definitely expect it when Rust hits Steam. That being said, the fact that the aggressor made a "demand statement" ups the ante a bit as it then becomes a truly "terrorist" situation related to e-crime. Maybe they don't care, maybe they do...but at least in the US cyber terrorism is something that Federal agencies often get involved in if the victim reaches out to them. (Even in small situations like this) Perhaps the real next step would be for the developers to reach out to Infragard or the DSAC and let the Feds investigate the cyber terrorism. Felony---Check Terrorist/hostage demand---Check International cyber crime---Check -Warchild

[QUOTE=bru;42592004]I don't believe you've been "in the anti-DDoS" for 5 years. Removing the IP address would stop fools from not seeing the server IP address, you're connected to it, you're sending data to and receiving from the server, you are exposed to the server's IP address, and that's all the attacker needs to find the IP address/port. You have no idea the characteristics of the attack, so you have no right to say "quite simple to stop DDoS attacks".[/QUOTE] edited due to the risk of imformation gained from the DDosers

Where is the "demand statement"?

[QUOTE=SpecialRAR;42592165]Where is the "demand statement"?[/QUOTE] Was deleted.

[QUOTE=OPGFrogger;42592153]so you say you can grab my ip from the server?, well its possible but if the person is DDoSing then they have no idea how too if they were smart they would just exploit like a real hacker, not saying im a hacker or anything just saying i do have knowledge of how stuff is done, and by grabbing ip from the server they would grab it from voip by grabbing the packet with some other tricks included, Also im more than happy to let my connection get DDoS as i sit back and laugh as nothing hits me i might get taken out for about 3 mins by denying access from the range of ips thats attacking Also as a note im not blaming this on facepunch or anything like they i blame it on there host as they own the connection that being attacked and they run a company that should have a good it team... Softlayer is just a trash company in my opinion[/QUOTE] No, I never stated I can get your IP address from the game, that's not possible it's peer-to-server, your IP address is never revealed to me and I never send connection data to you, only to the server and back.

[QUOTE=bru;42592188]No, I never stated I can get your IP address from the game, that's not possible it's peer-to-server, your IP address is never revealed to me and I never send connection data to you, only to the server and back.[/QUOTE] yeah witch mean were at no risk is all im saying the only thing at risk is us being able to play/play lag free, all we need to do is be patient and they will stop, now all im saying is i do know a little about the situation as i used to host multiple server, i was at about 120 cs:s server and then my business went sour i owned a couple dedicated serever to host them servers and i was no were near as big as softlayer witch is why softlayer disappoints me ahh i appoligize i mis read what you were saying as its simple from getting the ip address of the server, i thought you were trying to say its simple to get our ips from the server =D [editline]21st October 2013[/editline] edited due to the risk of imformation gained from the DDosers

[QUOTE=EMCSquared;42591523]So it's clear that the servers are being DDoSsed, hide it or try to deny it, it's pretty clear that they're being under DDoS. I am going to offer a simple solution, which might prevent it, or actually even completely stop the DDoSing issue. Maybe if the question comes up to you - Why in the world I would even read or trust this guy? Well first let me tell you that I've been working with DDoS and with Anti-DDoS for quite some time now, if not to lie somewhere around 5 years. Getting a DDoS protection which "stops/mitigates DDoS" for a server is way too costly (around $2.000-$5.500, all depends on a size of DDoS attack). So the only possible solution ATM. is just to prevent it. Now how to do it? Simple: a) Remove server IP Address and PORT information on web browser URL bar (That just asks to get DDoSed) b) After removing IP Address information on web browser url bar, make all the servers to change their IP Address. Why? Because what's the point of hiding IP, if the guy who is sending DDoS attack knows the IP already? Thanks for reading. Feel free to post any comments or questions. P.S. Sorry for my English grammar. English is my 3rd language.[/QUOTE] That isn't going to stop anyone who wants to attack the server, but good job with your English.