redirecting a ddos attack

Discussion in 'Security' started by HachimitsuBiz, Sep 5, 2007.

  1. #1
    ok introduction,

    my site has been aimed by one script kiddies that think it's fun to ddos my website. Good thing about it is that, they're aiming a page that doesn't do much to me. so i made a permanent redirect of that page onto the attacker isp site.

    What i would like to know is that, would i be held responsible for redirecting it tho them ? would i be accused as accomplish ?
     
    HachimitsuBiz, Sep 5, 2007 IP
  2. Angadude

    Angadude Peon

    Messages:
    250
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    lmao smart one.

    no. ur "innocently" redirecting a page. ;)
     
    Angadude, Sep 5, 2007 IP
  3. HachimitsuBiz

    HachimitsuBiz Peon

    Messages:
    158
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    really? then that's a relieve. they haven't stop ddosing me since 3 days ago.
     
    HachimitsuBiz, Sep 5, 2007 IP
  4. agnivo007

    agnivo007 Peon

    Messages:
    4,290
    Likes Received:
    289
    Best Answers:
    0
    Trophy Points:
    0
    #4
    LOL...good thinking. I'd have redirected to the ISP's terms page where they have put the policies against illegal activities.
    Add salt to injury...LOL
     
    agnivo007, Sep 5, 2007 IP
  5. scriptman

    scriptman Peon

    Messages:
    175
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #5
    If they were DDOSing you, I expect your entire website would be down - I suspect they are simply doing a WGET bandwidth leeching attack or something similar? If this is the case, a 301 redirect (my assumption on your "redirect" comment) does not divert requests to the actual hosts, if they're using something like WGET - which doesn't follow header redirects.

    ^That's a bunch of assumptions. Can you elaborate more on the nature of the attack?
     
    scriptman, Sep 16, 2007 IP
  6. HostJail

    HostJail Active Member

    Messages:
    180
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    58
    #6
    I would agree with you as well, but from what it seems, the attacker is not fully flooding the Vhost or port80. Therefore, the sites are not being affected
     
    HostJail, Sep 18, 2007 IP
  7. craigedmonds

    craigedmonds Notable Member

    Messages:
    705
    Likes Received:
    134
    Best Answers:
    0
    Trophy Points:
    235
    #7
    this is silly but would be fun.

    what you should do is have your server send an automated email to the abuse@ address at the ISP everytime they connect to your site containing the ip address browser types etc and a polite complaint message.

    :)
     
    craigedmonds, Sep 24, 2007 IP
  8. lkj

    lkj Peon

    Messages:
    729
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    0
    #8
    by default wget follows redirects...
    set-up a redirect to connect to 127.0.0.1
     
    lkj, Sep 25, 2007 IP
  9. scriptman

    scriptman Peon

    Messages:
    175
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Are you absolutely positive about that? It is my understanding that wget does not follow redirects, however I'm using a Windows version whose functionality may differ from the real deal. I find it hard to believe that this is the default setup for UNIX wget.
     
    scriptman, Sep 25, 2007 IP