Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS BLACKHOLE

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 5 Posters 5.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      Harvy66
      last edited by

      If someone is sending more data at you that when you cant handle, you will get packetloss. The more data they send, the more packetloss you get. You have to block the excess data before it gets to you. If it's a DDOS, then your ISP can blackhole you. In other words, they will disconnect you from the Internet.

      1 Reply Last reply Reply Quote 0
      • I
        itsignas
        last edited by

        It's useless if i get disconnected i have pfSense, which protect my other servers being hit by ddos..

        1 Reply Last reply Reply Quote 0
        • H
          heper
          last edited by

          http://blogs.verisign.com/blog/entry/ddos_blog_series_1_4?cmp=blog

          this explains it very well. but beware: its advertisement for verisign-cloud-ddos-mitigation

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            "if they decide to ddos at port 2555,80"

            Well yeah.. But what does it matter if they are sending 300mbps down your 100mbps pipe…  I thought I explained it quite well.. Your road is FULL!!!

            If they were sending 10 or 30 or even maybe 50 or 75 even you could do something to ride out the storm by not forwarding that traffic through to your servers..  But its useless if its a load or volume based attack where they just overwhelm the capacity of your network connection..

            In this sort of attack, the traffic has to be prevented from going down your connection...  As again thought clearly stated, change your IP, get your isp to prevent the traffic!!  Or use ddos cloud service like in the blog heper linked too..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • I
              itsignas
              last edited by

              @johnpoz:

              "if they decide to ddos at port 2555,80"

              Well yeah.. But what does it matter if they are sending 300mbps down your 100mbps pipe…  I thought I explained it quite well.. Your road is FULL!!!

              If they were sending 10 or 30 or even maybe 50 or 75 even you could do something to ride out the storm by not forwarding that traffic through to your servers..  But its useless if its a load or volume based attack where they just overwhelm the capacity of your network connection..

              In this sort of attack, the traffic has to be prevented from going down your connection...  As again thought clearly stated, change your IP, get your isp to prevent the traffic!!  Or use ddos cloud service like in the blog heper linked too..

              Thanks, sorry for that ;/

              Well i have some strange issue, when using speed test's anything else, i get 100mb/s - What i pay for, but sometimes when i download files from torrent websites i manage to get 200mb/s (300mb/s rare), so will it might help against ddos, or dfq is this? Kinda network-speedstep (like intel cpu) ? :D

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                if your on a 100mbps connection, how would you get 200mbps from torrents?  What is your connection you pay for??  And what is the actual physical interface connection, it is gig or 100?

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • I
                  itsignas
                  last edited by

                  I pay for 100mb/s Optimal Fiber, from TEO, My pc is gig, router(wi-fi) is 300mb/s with 5 ports i think.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Your wifi is 300mb/s So N300, that is PHY… your actual possible bandwidth with 1 client and perfect connectivity would be maybe 150..  But then again many of those N300 wifi routers don't even have gig interfaces so your talking at most maybe upper 90's since your on a 100mb ethernet port.

                    So you have 100mb connection to the internet -- how do you think you could get 200mbps with a torrent?

                    Not sure what your wifi has to do with a ddos against you?  Your servers are not connected via wifi are they?

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • I
                      itsignas
                      last edited by

                      Here the proof:

                      Made recently.

                      Okay here one more photo.

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        proof of what??  that your downloading illegal software?  And that your data is reporting wrong… What does your wan interface say for its traffic flow?

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • I
                          itsignas
                          last edited by

                          It's shitty router by ISP it can't show realtime usage.

                          Even windows reporting 200mb/s +….....

                          So how it's possible, im getting some turbo boost speeds, but in other test's im getting what i pay for. What is that?

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.