News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

High Stress?

Started by xrunner, January 12, 2011, 12:15:55 PM

Previous topic - Next topic

crustybum

Getting the "stress" thing a lot today...seems to hang a lot..

Masterd

Quote from: crustybum on February 18, 2011, 11:05:53 AM
Getting the "stress" thing a lot today

Me, too. I will start to cry very soon if this continues.

* Masterd cries. :'(

All Colours Sam

why?   site team is doing as much a they can do to fix this,  everyone are being affected by this problem...  instead of complain, provided info so this can be fixed sooner...


Oh, wouldn't it be great if I *was* crazy? ...then the world would be okay
Suki

Masterd

This is still caused by DDOS attacks?

Joshua Dickerson

Quote from: Masterd on February 18, 2011, 11:19:43 AM
This is still caused by DDOS attacks?
Yes. They don't stop
Come work with me at Promenade Group



Need help? See the wiki. Want to help SMF? See the wiki!

Did you know you can help develop SMF? See us on Github.

How have you bettered the world today?

NanoSector

My Mods / Mod Builder - A tool to easily create mods / Blog
"I've heard from a reliable source that the Answer is 42. But, still no word on what the question is."

Joshua Dickerson

Trying to trip them up is really the only way we can work at this. It isn't just this forum, others are starting to get targeted as well. So, hopefully we'll see if any commonalities occur and we can use that. Then the bot owner will just change their bot and we'll start all over again.
Come work with me at Promenade Group



Need help? See the wiki. Want to help SMF? See the wiki!

Did you know you can help develop SMF? See us on Github.

How have you bettered the world today?

Masterd


busterone

Is this attack the same as the bots attempting to login using existing usernames that so many are experiencing, or is this a completely separate attack?

Joshua Dickerson

They seem to be related.
Come work with me at Promenade Group



Need help? See the wiki. Want to help SMF? See the wiki!

Did you know you can help develop SMF? See us on Github.

How have you bettered the world today?

busterone

I suspected as much. I started experiencing log in issues and high stress notices when viewing topics and search around the same time some started reporting the attacks on their forums. I don't know why, but mine has not been hit by these bots at all.  At least not yet.  8)

GravuTrad

On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

rd

^

A Sysadmins I know indeed does this :P or why not just find where servers are coming from and report them or something?


LiroyvH

If it would be that easy and would actually be a solution; it would have been done.
Returning the attack is really the most... Well, stupid (cant find a better word :P) thing to do. There is absolutely no point, a waste of bandwidth and it is illegal. "But what they are doing is illegal aswell" is unfortunatly not a valid argument. Besides, running a single attack will also cause CPU load and traffic load. And I do not own a botnet to do an actual DDoS rather than DoS.

Various of reports have already been sent out to abuse teams. The problem with this is always: shut one down, get many in return.
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

GravuTrad

I was joking liroy lol...i know it's hard to fight against ddos attacks...(or with expensive material...)
On a toujours besoin d'un plus petit que soi! (Petit!Petit!)


Think about Search function before posting.
Pensez à la fonction Recherche avant de poster.

LiroyvH

I know :D


Ok folks, another security measure has been set in place to see if it will limit the attack even further. However, the reason I only set it up in there now and not immediately is because I have my concerns about how it functions towards normal visitors such as yourself :) With the settings I put in there it *should* not cause issues, and my tests turn out it wont, but as always on heavily visited websites: you can never be 100% sure if it works towards all the users ;) My tests say they do, practice will sometimes turn out different. This far: all seems to be going well as expected.

So if anyone experiences on several occasions that your connection is actually refused (so you get a connection error instead of the "High Stress" error) rather than getting an error page from our server: please let me know immediately so I may investigate if that was due to these new settings :)

If I am right, and I shamelessly do believe I am, nobody will notice this new security setting except for the attackers. Please do report it though if it becomes agressive to you :)

Reports on the stress errors are still more than welcome as well! :)
Do you still experience them? Do you experience them even less than before? :) Or, which is ofcourse something I can never rule out, did it turn worse for you?

Thanks in advance for your reports. They are very helpfull as thelp help me actively see when something goes wrong: where it goes wrong :)
Thanks!


- Liroy
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

Dzonny

Thanks for update :)
Its all fine now, and i have not experience stress today though. :)

All Colours Sam

me too, I haven't had any issues since yesterday   8)
Oh, wouldn't it be great if I *was* crazy? ...then the world would be okay
Suki

LiroyvH

Thank you both for the update!
That's the desired effect :D
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

busterone

Same here. Smooth operation with no noticeable issues in 2 days for me.

Advertisement: