DDoS Protection
 

How do you stay protected from a DDoS attack, if you have a Virgin Media Superhub?


Which Security options do you enable on the Superhub?



Thanks

Re: DDoS Protection
 

untick respond to ping requests

Re: DDoS Protection
 

Do I uncheck this:


WAN Ping Respond:-

- Respond to ICMP echo requests sent to WAN IP



?

Re: DDoS Protection
 

yeah uncheck that, that means it wont repond, but doesnt "protect" you as such

Re: DDoS Protection
 

To be protect from DDoS, you have to get VPN???


Thanks

Re: DDoS Protection
 

Disabling ping response is about all you can do, what exactly is your situation? are you being DDoSed?

Re: DDoS Protection
 

No, I just wanted to know how you would protect yourself if someone DDoS attacked your IP address...

Re: DDoS Protection
 

Just why would you expect a home IP address to suffer a DDoS?

Re: DDoS Protection
 

he works for MI5 and has many enemies, foreign and domestic

Re: DDoS Protection
 

The only way to protect against a DDoS is to have your ISP null-route your IP at the border.

Absolutely nothing you could ever do on a Superhub will give you any sort of protection whatsoever

Re: DDoS Protection
 

Not responding to pings would most likely make the attacker give up though

Re: DDoS Protection
 

Some here would have you washing your mouth out with soap for casting such aspersions against the bestest hub in the known universe.

Re: DDoS Protection
 

No, they wouldn't - but well done on the off-topic ad hominem aspersion......

Re: DDoS Protection
 

My Asus Router has a DDoS attack protection.

Re: DDoS Protection
 

So does tomato firmware, it just drops packets if it gets a suspicious amount of ping requests, something my router was doing when I was running ping monitors from 2 servers as well as thinkbroadbands monitor, it was showing 10% packet loss on each

Re: DDoS Protection
 

I doubt either would be very effective as a proper DDoS would be hitting the target with so many unwanted packets they would swamp wanted ones even on a 100Mbps connection.

I still maintain that a home connection is very unlikely target. A botnet is a very valuable resource and wouldn't be wasted on such a target. A script kiddy fails on the first D of DDoS but could conceivably cause some inconvenience if they had enough bandwidth at their disposal but once again why would they bother?

Re: DDoS Protection
 

Indeed. A ping flood is very amateur these days.

The vulnerable hop on a home connection is the slow WAN link between your modem and the ISP's core and your home router (Superhub or otherwise) will have absolutely no control over the data coming down that link and therefore afford absolutely no protection against (D)DoS attacks.

The only way to stop a DoS affecting your link is to stop the data going down your link to begin with, which can only happen at the ISP end.

Re: DDoS Protection
 

Is the average user likely to get a DDOS?

Re: DDoS Protection
 

Theoretically, you stop responding to pings over the wan and you enable the 'firewall' on the Shub. In reality these things will not help you one iota and will likely end up restricting you more than they do a potential attacker.

You are unlikely to ever see a real DDoS attack. If you are at risk of such, you need to look in to far more heafty measures than the Shub will ever offer.

Re: DDoS Protection
 

No

Re: DDoS Protection
 

I've DDoS'ed a few hundred average users...

Re: DDoS Protection
 

I think it's a criminal offence these days so best to keep that to yourself IMO.

Re: DDoS Protection
 

Mitigating circumstances ;)

Re: DDoS Protection
 

Blocking pings is pretty unlikely to have any noticeable affect on a ddos attack other than to make it harder for the attacker to determine the affect of his attacks on you.