Advertisement:

Author Topic: SimpleMachines Server issues  (Read 895996 times)

Offline Masterd

  • SMF Hero
  • ******
  • Posts: 3,847
  • Gender: Male
  • Sapienti satis.
Re: SimpleMachines Server issues
« Reply #40 on: February 13, 2011, 12:49:40 PM »
Those DDOS attacks are annoying me!
My Mods

Sugested that too. Hey ho. I'd link you to the original discussion but it's not visible to most people (seekrit team board stuff that is more dangerous than wikileaks).


Don't PM me for support! Use the appropriate support board!

It's the possibility of having a dream come true that makes life interesting.

Offline GravuTrad

  • Senior Translator
  • SMF Hero
  • *
  • Posts: 8,489
  • Gender: Male
  • One of the french SMF translators
On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

Offline TheMortician4

  • Jr. Member
  • **
  • Posts: 241
  • Gender: Male
  • Still Learning and Loving the Experience
    • BBI Clan Official Website
Re: SimpleMachines Server issues
« Reply #42 on: February 24, 2011, 09:31:14 AM »
I'm not sure if traffic is non-human, judging by the many interests, I think it's not that bad with human vs non-human :)
Either way, a permanent solution should be here soon. We've already limited the damage pretty well and i'm looking over various solutions to implement on the server/network, hope it will stop the attacks completely :) (Or atleast: stop it from harming the server :P)

Today we received another attack, some may have noticed that sometimes the server became very slow.

I am averaging between 300 and 350 attempts a month to access the site by non-member related persons. So far GoDaddy, and SMF have proven strong.

Hope that continues.....
In any case, we are working hard on this behind the scenes and it looks like it is starting to deliver ;D

Offline 1speced

  • Newbie
  • *
  • Posts: 2
Re: SimpleMachines Server issues
« Reply #43 on: February 25, 2011, 05:29:51 PM »
WOW i can't even access my forums now try if you want [link removed by moderator: see the support forum from your provider]
« Last Edit: March 04, 2011, 08:32:39 PM by Joshua Dickerson »

Offline Illori

  • Doc Coordinator
  • SMF Master
  • *
  • Posts: 36,729
Re: SimpleMachines Server issues
« Reply #44 on: February 25, 2011, 05:31:54 PM »
please contact your host, that has nothing to do with the issues this site is facing. please do not use this thread for support issues.

Offline robinson01

  • Newbie
  • *
  • Posts: 4
Re: SimpleMachines Server issues
« Reply #45 on: May 04, 2011, 06:57:30 AM »
Thats ok,we hope soon you can fix it,keep working on it..

Offline Andria John

  • Newbie
  • *
  • Posts: 1
Re: SimpleMachines Server issues
« Reply #46 on: May 12, 2011, 01:23:14 AM »
For DDOS attacks trying to install Forum Firewall.Hope it works.

Online NanoSector

  • On Hiatus
  • SMF Super Hero
  • *
  • Posts: 10,095
  • Gender: Male
    • rick2288 on Facebook
    • Yoshi2889 on GitHub
    • Test Server
Re: SimpleMachines Server issues
« Reply #47 on: May 12, 2011, 04:54:45 AM »
For DDOS attacks trying to install Forum Firewall.Hope it works.
That won't have helped with this server, the mod is very tiny and then must compete against large attacks...
My Mods / Mod Builder - A tool to easily create mods / Support team member / Website - Help us test SMF 2.1!
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."

Offline 青山 素子

  • Server Team
  • SMF Super Hero
  • *
  • Posts: 16,542
  • 戦場ヶ原、蕩れ!
    • motokochan on GitHub
    • @motokochan on Twitter
    • Animeneko Network
Re: SimpleMachines Server issues
« Reply #48 on: May 12, 2011, 11:28:39 AM »
A real DDoS attack (putthing as much legitimate-looking traffic as possible through) won't be stopped by much. If it's a real DDoS, you'll need to consult with your hosting provider for options to mitigate the attack.

If it's low-level and the IPs aren't constantly changing and you have a dedicated or VPS, something like mod_cband in Apache HTTPd will probably help. You can rate-limit connections.
Motoko-chan
Director, Simple Machines

Just like... making of enemies / 負ける気しない やめるきない / You are cool but fool - Charisma.com 『HATE』

Note: I am not a member of the Simple Machines Forum project.


Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 13,454
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SimpleMachines Server issues
« Reply #49 on: May 12, 2011, 01:13:48 PM »
Actually put such a measure in front of Apache, combining it with the firewall. I usually find that more comfortable and reliable.
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline butchs

  • SMF Hero
  • ******
  • Posts: 1,632
  • The Jarred of spam bots, lost 7GB bandwidth!
    • EastCoastRollingThunder
Re: SimpleMachines Server issues
« Reply #50 on: May 15, 2011, 06:43:31 AM »
For DDOS attacks trying to install Forum Firewall.Hope it works.
That won't have helped with this server, the mod is very tiny and then must compete against large attacks...

Eh?

You need to bring about layers of security.  First off you should have a hardware firewall such as a Cisco ASA.  Then you should get a proxy firewall such as mod_security, follow up with htaccess protection and then FF will handle the stragglers.  FF can then ban the low levels for an hour at a time as their ip's change and they come back just to get banned again.  Finally they go elsewhere...  If you are getting hit super hard.  Turn cache on and logging off after you complete the test run, for extra speed.

My site was attacked with DOS attacks for months.  I tried many things (which are still in place).  They always came back and took down my site with DOS.  Say what you will but after I finished FF, the attacks failed and my bandwidth dropped like a rock.
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Online NanoSector

  • On Hiatus
  • SMF Super Hero
  • *
  • Posts: 10,095
  • Gender: Male
    • rick2288 on Facebook
    • Yoshi2889 on GitHub
    • Test Server
Re: SimpleMachines Server issues
« Reply #51 on: May 15, 2011, 07:58:01 AM »
For DDOS attacks trying to install Forum Firewall.Hope it works.
That won't have helped with this server, the mod is very tiny and then must compete against large attacks...

Eh?

You need to bring about layers of security.  First off you should have a hardware firewall such as a Cisco ASA.  Then you should get a proxy firewall such as mod_security, follow up with htaccess protection and then FF will handle the stragglers.  FF can then ban the low levels for an hour at a time as their ip's change and they come back just to get banned again.  Finally they go elsewhere...  If you are getting hit super hard.  Turn cache on and logging off after you complete the test run, for extra speed.

My site was attacked with DOS attacks for months.  I tried many things (which are still in place).  They always came back and took down my site with DOS.  Say what you will but after I finished FF, the attacks failed and my bandwidth dropped like a rock.
Yes but this already has been mentioned before, a modification will not work.
My Mods / Mod Builder - A tool to easily create mods / Support team member / Website - Help us test SMF 2.1!
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 13,454
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SimpleMachines Server issues
« Reply #52 on: May 15, 2011, 11:35:43 AM »
mod_security? No thank you.
As already explained on multiple occasions, these attacks are not picked up by our hardware firewall. They are legitimate traffic, low-level plus it is not in full related to the login attacks as many people seem to think.
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline butchs

  • SMF Hero
  • ******
  • Posts: 1,632
  • The Jarred of spam bots, lost 7GB bandwidth!
    • EastCoastRollingThunder
Re: SimpleMachines Server issues
« Reply #53 on: May 15, 2011, 08:08:44 PM »
Getting conflicting info here.  ???
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 13,454
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SimpleMachines Server issues
« Reply #54 on: May 16, 2011, 03:09:35 AM »
Getting conflicting info here.  ???


What conflicting info?
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline butchs

  • SMF Hero
  • ******
  • Posts: 1,632
  • The Jarred of spam bots, lost 7GB bandwidth!
    • EastCoastRollingThunder
Re: SimpleMachines Server issues
« Reply #55 on: May 16, 2011, 09:26:27 PM »
If a modification will not work it is a high end assault on your server that compromises your upstream protection.  But, if it is a low end assault then Bad Behavior is designed for such things.  With cache, strict mod, project honeypot and logging off, it will handle large servers with ease, having minimal member blocking.  You can run with "Display statistics" of and no-one but the bots will know...   :o
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 13,454
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SimpleMachines Server issues
« Reply #56 on: May 17, 2011, 08:16:02 AM »
As I said, they are legitimate requests. They are only slightly different from regular requests and go undetected.
I have setup a customised protection setup to handle this and it seems to work out well so far, especially with the nginx setup SleePy made to balance the loads. No need for measures that decrease overall performance.
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Offline butchs

  • SMF Hero
  • ******
  • Posts: 1,632
  • The Jarred of spam bots, lost 7GB bandwidth!
    • EastCoastRollingThunder
Re: SimpleMachines Server issues
« Reply #57 on: May 17, 2011, 07:48:29 PM »
BB operates on larger sites than this one with no performance issues.  It runs in the low millisecond range.  The SMF version with cache is faster than all other ports.

All I was trying to do is help.  I am glad you have everything under control.  Sorry to annoy you...
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

Offline DHC

  • Charter Member
  • Jr. Member
  • *
  • Posts: 166
Re: SimpleMachines Server issues
« Reply #58 on: May 19, 2011, 11:23:39 AM »
BB operates on larger sites than this one with no performance issues.  It runs in the low millisecond range.  The SMF version with cache is faster than all other ports.

All I was trying to do is help.  I am glad you have everything under control.  Sorry to annoy you...


Just a small point, but one worth making I think - whereas some of the SMF folks might feel a bit miffed, the exchange of information was quite helpful and I appreciate you taking the time. The SMF folks seem quite adept at dealing with such matters, but I would wager there are a large number of members who are not nearly so adept (I am in that category) and having the opportunity to read this exchange of information offers insights and ideas.

Soooo . . . I say THANKS to you and to the SMF folks who participated in the topic.

FWIW

Offline CoreISP

  • Server Admin
  • Server Team
  • SMF Super Hero
  • *
  • Posts: 13,454
  • Gender: Male
  • CoreISP.net
    • coreisp on Facebook
    • liroyvh on LinkedIn
    • @liroyvh on Twitter
    • CoreISP Corporation :: WebHosting, Dedicated Servers, and more!
Re: SimpleMachines Server issues
« Reply #59 on: May 19, 2011, 08:17:29 PM »
I thought I replied to this topic.
I was not annoyed :) I appreciate the thinking. The more people that think about something, the better.

There's just a lot more to keep in mind than blocking things while blocking things... If that makes any sense :P So not everything can or should be applied.
- CoreISP.net Corporation -
  WebHosting, Colocation, Domain Registration & Network Services
- DedicatedBox.us Servers -
  Low priced Servers in a high-quality Network, the place for all your (advanced) server needs.
  We specialize in hosting big boards. Contact us!

((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.