UDP DDOS Attack, Log IP
-
Hey everyone,
I am new to pfsense and love it so far. One of the biggest issues I deal with is DDOS UDP flood attacks. I have already gathered a lot of information about how the attacks work and how to prevent them. The only way to really prevent UDP flood attacks is upstream if I am correct? I have talked to my ISP and the only way they can do anything is when I have an IP/IPs from the attacker. I wanted to setup a system so that if I get a massive amount of UDP traffic, pfsense sends me a log of the IPs that have been pushing a lot of traffic though my firewall.
I appreciate any help! :)
Thanks,
Brandon