[Help] protect from Socket attack

Discussion in 'Security' started by kfirfer, Mar 18, 2008.

0
  1. #1
    Some one told me that my website down becouase of Socket attack,
    im using wamp5(apache)
    windows server 2003
    windows firewall(all ports configure well)

    So How I prevent socket attack? and what is it socket attack ?


    thanks alot for helpers !
    and sry for my english !
     
    kfirfer, Mar 18, 2008 IP
  2. Ladadadada

    Ladadadada Peon

    Messages:
    382
    Likes Received:
    36
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I've never heard of anything called a "socket attack" and Google seems to think it has something to do with World of Warcraft.

    ...unless they are talking about your power socket...
     
    Ladadadada, Mar 18, 2008 IP
  3. RoxD

    RoxD Active Member

    Messages:
    154
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    53
    #3
    There is a type of Denial of Service attack against web servers which will overload the connections by opening them over and over until the server stops allowing connections. You can migrate this by setting the max connections for each user, and banning offending users if necessary.
     
    RoxD, Mar 18, 2008 IP
  4. worldpresident

    worldpresident Banned

    Messages:
    163
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #4
    there are some kind of flood atack that can be send to your ip and server probably shut down for protecting your files.
    you need to install a script that shows you all the information like:
    where the traffic comes
    log the ip
    country location
    reffer in very important
    etc...
    than you can see from where the attacks comes and than you can try to stop them or put some restrictions on your server for specific area or ip's
    starting with 192.33.33.1 and ends with 192.33.33.* for ex.
     
    worldpresident, Mar 19, 2008 IP
  5. recursive

    recursive Peon

    Messages:
    18
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #5
    edit: never mind me.
     
    recursive, Mar 20, 2008 IP
  6. rootbinbash

    rootbinbash Peon

    Messages:
    2,198
    Likes Received:
    88
    Best Answers:
    0
    Trophy Points:
    0
    #6
    dont try to block it with iptables : ) you can use snort.apache config + cluster is the most important thing for that.
     
    rootbinbash, Mar 22, 2008 IP
  7. SSANZ

    SSANZ Peon

    Messages:
    861
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    0
    #7
    none of you have even told him one bit of useful information - IPTABLES IS FOR LINUX - rootninbash, worldpresident you don't even know what your talking about.


    The attack your suffering is most likely one of the following;

    SYN attack
    Buffer Overflow ( application vulns )
    dDOS - Many different types including SYN floods, these will cause all open sockets/connections
    of your server to become unavailable.
    Windows firewall is crap, get 3rd party along with a hardware firewall - linux box. Windoze just sucks bawlz.

    I highly suggest you get a server management contractor in to investigate your issues.

    Regards,
    SSANZ
     
    SSANZ, Mar 24, 2008 IP