You should update this thread and also clear your PMs, here's my reply to your most recent one:
Sure thing, and yes it's down for everyone if you hadn't been keeping up. Everyone went to T3, then when that went down to Powerball, now everyone is in some zone I hadn't heard of until today called Omega Fire, 80+ in there. Apparently it's not part of the SSC datacenter so it's not affected, BUT the owner did receive a notice from his ISP that he was being targeted by a DDoS.
If it is a DDoS, we need to figure out what kind of DDoS it is and act accordingly. I said this in the "rip tw" thread, but if it's a SYN flood, change server settings to kill half-open sessions much faster should mitigate it. If it's low-level, need to contact the upstream provider. Of course, DoCk> probably already knows how to handle this sort of thing, but just in case.
The site was down a day or two ago; I figured it was a continuation of the DDoS that happened during TWL and gave up, but it seems like it's getting worse. Whoever is doing this is being very persistent, it doesn't seem like it will just go away/they will get bored. We need to act. The timing of this is horrible being right after TWL finals debacle. Right at a time when population falls off a cliff after TWL is going to end, this happens. Really could be the last days if we just say "we are working on it" and hope whoever is responsible for this just gets bored.
I hope PriitK doesn't have e-mail from TW blocked.
Sure thing, and yes it's down for everyone if you hadn't been keeping up. Everyone went to T3, then when that went down to Powerball, now everyone is in some zone I hadn't heard of until today called Omega Fire, 80+ in there. Apparently it's not part of the SSC datacenter so it's not affected, BUT the owner did receive a notice from his ISP that he was being targeted by a DDoS.
If it is a DDoS, we need to figure out what kind of DDoS it is and act accordingly. I said this in the "rip tw" thread, but if it's a SYN flood, change server settings to kill half-open sessions much faster should mitigate it. If it's low-level, need to contact the upstream provider. Of course, DoCk> probably already knows how to handle this sort of thing, but just in case.
The site was down a day or two ago; I figured it was a continuation of the DDoS that happened during TWL and gave up, but it seems like it's getting worse. Whoever is doing this is being very persistent, it doesn't seem like it will just go away/they will get bored. We need to act. The timing of this is horrible being right after TWL finals debacle. Right at a time when population falls off a cliff after TWL is going to end, this happens. Really could be the last days if we just say "we are working on it" and hope whoever is responsible for this just gets bored.
I hope PriitK doesn't have e-mail from TW blocked.
Comment