POD(PING OF DEATH PROBLEM

This is not a Support area! Discuss about the Server here. Non-Server related discussion goes in Off-Topic Discussion.
Forum rules
READ NOW: L2j Forums Rules of Conduct
Post Reply
darkwolf999
Posts: 87
Joined: Fri May 27, 2005 10:31 pm

POD(PING OF DEATH PROBLEM

Post by darkwolf999 »

does somebody know how to block a ping of death? somebody attacked us several times. is there a program or somethingto block that stuff>?
takhs7
Posts: 110
Joined: Sun Aug 31, 2008 7:16 am

Re: POD(PING OF DEATH PROBLEM

Post by takhs7 »

a ping attack? :/ i doubt its that.. sounds weak to me.. probably something like l2j-attacker that floods the memory with crap packet(s)... solution? there isnt anything that can protect u 100% of DDoS attacks as far as i know.. there are some fixes here and there but... :roll:
User avatar
janiii
L2j Veteran
L2j Veteran
Posts: 4269
Joined: Wed May 28, 2008 3:15 pm
Location: Slovakia

Re: POD(PING OF DEATH PROBLEM

Post by janiii »

update to latest svn revision. make some firewall precautions. set up your server computer better. check forum for some suggestions how to keep away attackers from your server.
DO NOT EVEN TRY TO MESS WITH ME!
forum flOOder dancing dEVILoper
I don't give private support - PM will be ignored!
TheSaint
Posts: 19
Joined: Tue Apr 21, 2009 7:23 pm

Re: POD(PING OF DEATH PROBLEM

Post by TheSaint »

darkwolf999 wrote:does somebody know how to block a ping of death? somebody attacked us several times. is there a program or somethingto block that stuff>?
If you are sure that the attack is really PoD you may consider to cut off the incoming ICMP traffic on your border firewall on outside interface (or even router). From the certain point of view ICMP is only diagnostic protocol and rejecting such malformed traffic is not harmfull. However this traffic will fill your internet connection because even if it will not reach the destination server, it will reach the outside interface.
In this case you will have to talk to your internet provider and ask him to inspect ICMP on your downlink. Such inspection should allow normalized ICMP and reject malformed packets (in this case packets with abnormal size).

A.
Deadmeat
Posts: 286
Joined: Fri Sep 22, 2006 1:03 am
Location: Red Rock, Mars

Re: POD(PING OF DEATH PROBLEM

Post by Deadmeat »

Most Router's and Firewall's by default have TCP port 7 blocked and ingnore echo packets and if you don't have a hardware Firewall you can use software Firewall to do the same thing but most software Firewall's don't work as well as hardware and slow your computer down, also like TheSaint said it will only stop the packets at the Router/Firewall and you should do a Whois on the IP and find out who the ISP is for the IP address and contact them and let them know that there customer is ping flooding you from that IP address.
Post Reply