Announcement

Collapse
No announcement yet.

Disgruntled Ex-LS Mates and DoS Attacks

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Disgruntled Ex-LS Mates and DoS Attacks

    Ok, so quick background. My LS is a "family friendly" LS. That is, the leader of our linkshell felt it best - because we have members under age of 18 - to set aside certain times for "appropriate" and "inappropriate" behavior. Very simply, before 10pm CST the LS talk is more or less PG with a few specific exceptions. After 10PM CST almost anything goes.

    Every single member of our linkshell is told of this rule (and has to agree to follow it) before recieving a pearl.

    Its not that hard. Of course, every once in a while, someone is a smart ass, and breaks the rule. We let it slide. They get a warning. No big deal. Sometimes it takes a couple weeks for people to get used to it - especially if they are on GMT, or JST. I mean, the rule is CST based after all.

    So people usually get multiple warnings. From multiple sack holders (who basicly only have a sack because they are "officially" in charge of enforcing the LS rules).

    Yet someone, inevitably, decides to intentionally and wilfully, go above and beyond in breaking the rules. We're talking on the level of XXX bad 3D 70's porn breakage, JUST because they can and decide that "the 10pm rule is for loosers LOLZ."

    These people get kicked. No biggy. I'm sure they will find plenty of other LS's that don't have a PG rule, and I wish them better luck with thier new LS, and more friends in thier next life.

    Well, one of these people decided to DoS attack our LS webpage. Now, I would like to point out that our LS webpage is hosted on my cable connection using a dynamic DNS service. That means when the webpage got DoS attacked, -I- started loosing internet connection.

    Took me weeks to figure out what was going on. Three cable modems later, two routers, technicians at the house, technicians down the block. The internet company had NO clue what was going on, and neither did I until today. Of course, during all of this, we've had firewalls off because of all the techs doing work to solve the problem (how ironic).

    So now we have a problem, no idea why, and no way to find out (because the firewalls are off -.- ) and the only logging is done via router at this point (which is disconnected while the techs work with a computer that is "directly connected" to internet).

    It suddenly occurs to me that maybe it wasn't an issue with the internet service, so I hook up the router, and sure enough HORDES of transfering data... and internet goes down.

    I'm going to take the time to point out, now, that my connection issues started in conjunction with me booting a particularly nasty ex-member from the LS, a thought that didn't occur to me until I realized I was the victim of a DoS attack.

    Anyhow, I highly, highly suspect that the attacks and my discconects of the last two weeks were caused by an ex-LS Mate. Either way, I got my vengence.

    I turned on some firewall software, got the offending IP address (it was a brodband connection based in the same city as the previously booted LS mate, consequently), and redirected my dynamic DNS to his IP address.

    Why do people have to be so... childish? I hope he has fun DoS'ing me, now.

    Double Post Edited:
    I can't help but notice the irony for the "childish" comment I made, considering what I did was fairly childish as well.
    Last edited by sevenpointflaw; 06-11-2006, 01:54 PM. Reason: Automerged Doublepost

  • #2
    Re: Disgruntled Ex-LS Mates and DoS Attacks

    Man some linkshells really have the drama.

    Comment


    • #3
      Re: Disgruntled Ex-LS Mates and DoS Attacks

      No kidding @.@

      I suppose it comes with so many people in one place. I can't remember the last time my LS had less than 30 people on at once. Honestly, I'm surprised this hasn't happened sooner ><

      Comment


      • #4
        Re: Disgruntled Ex-LS Mates and DoS Attacks

        The proper way of dealing with it would have been to have your ISP block that IP from ever reaching you. While redirecting you DDNS entry seems funny now, it doesn't solve anything as you will want to put it back the way that it was before eventually. Also depending on your level of comfort with network devices might want to look into a more featured gateway that would let you control your connection a little more and implement better logging.

        DoS attacks are so simple to set up its essentially the same as a school yard bully giving people wedgies and thinking they're all that for intimidating people. It's just some moron on the other end thinking that they're some 31337 h4x0r.
        I use a Mac because I'm just better than you are.

        HTTP Error 418 - I'm A Teapot - The resulting entity body MAY be short and stout.

        loose

        Comment


        • #5
          Re: Disgruntled Ex-LS Mates and DoS Attacks

          Normally I'd agree, but the dynamic domain is going byebye anyhow, and getting Comcast to do ANYTHING is futile (they had all the clues to tell them it was a DoS attack, and couldn't put it together until I pointed it out to them; then the tech gave me a 'I'll be damned' sort of comment).

          About 30min after I figured it all out, I just updated the name servers on the new domain I've been to lazy to set up for the last two weeks. I couldn't give two <10CST> about what happens to the old one. New domain. New happy webpage on a real server, on a real backbone.

          Comment


          • #6
            Re: Disgruntled Ex-LS Mates and DoS Attacks

            Originally posted by sevenpointflaw
            Normally I'd agree, but the dynamic domain is going byebye anyhow, and getting Comcast to do ANYTHING is futile (they had all the clues to tell them it was a DoS attack, and couldn't put it together until I pointed it out to them; then the tech gave me a 'I'll be damned' sort of comment).
            In fairness to Comcast (I work for tech support for a different cable company, and this sort of stuff really irks me), this thing probably didn't occur to them because most cable internet providers have clauses in thier AUP that expressly forbid the running of ANY sort of servers on a residential account. Which is also why you can't get static IPs, there's no need to have a static IP if you aren't supposed to be running servers on thier connection. Normally, residential accounts are very rarely the subject of ongoing DOS attacks, because you can generally unplug your cable modem for about 10 minutes, plug it back in, and get a new IP address from the DHCP server.

            So blaming your cable company's tech support because you were getting DOS'd through your dyndns redirect due to a server you were running against your terms of service is really unfair to them.

            Comment


            • #7
              Re: Disgruntled Ex-LS Mates and DoS Attacks

              Originally posted by sevenpointflaw
              I turned on some firewall software, got the offending IP address (it was a brodband connection based in the same city as the previously booted LS mate, consequently), and redirected my dynamic DNS to his IP address.
              Reminds me of the User Friendly comic where Miranda dared the 1337 H@x0rz to DoS her personal ip address of 127.0.0.1...

              I can't believe someone would perform a DoS using thier real IP address.

              You could have made it more interesting -- changing your DNS record to point to mail or web server of the state police where the IP was registered -- or set it to the ISP's gateway.

              signature by fallenintoshadows

              Comment


              • #8
                Re: Disgruntled Ex-LS Mates and DoS Attacks

                Originally posted by Gentoo
                I can't believe someone would perform a DoS using thier real IP address.
                While spoofing an IP is trivial, few 31337 h4x0rs think of it.

                Originally posted by Gentoo
                You could have made it more interesting -- changing your DNS record to point to mail or web server of the state police where the IP was registered -- or set it to the ISP's gateway.
                This would put you at fault for any damages that might arise.
                I use a Mac because I'm just better than you are.

                HTTP Error 418 - I'm A Teapot - The resulting entity body MAY be short and stout.

                loose

                Comment


                • #9
                  Re: Disgruntled Ex-LS Mates and DoS Attacks

                  I don't think what you did was childish at all. You didn't really do anything except set up a mirror that bounces whatever they do back. And come on... DDoSing someone because you where kicked out of a LS for not following the rules? >.>
                  Originally posted by Ellipses
                  Really, it's just like pretty much every question about this game that begins with "Why." The answer is "Because."
                  Originally posted by MCLV
                  A subjob is like sex, you shouldn't have it untill your 18 but if you don't have it after 21 everyone laughs at you.
                  More Sig:

                  Comment


                  • #10
                    Re: Disgruntled Ex-LS Mates and DoS Attacks

                    um can you bring this up to the police and have some kinda action against such attack?
                    There are painters who transform the sun into a yellow spot,
                    but there are others who with the help of their art and their intelligence
                    transform a yellow spot into the sun.

                    - Pablo Picasso

                    Comment


                    • #11
                      Re: Disgruntled Ex-LS Mates and DoS Attacks

                      I agree with Jei, i know where I work we report all DoS attacks to the authorities.

                      Comment


                      • #12
                        Re: Disgruntled Ex-LS Mates and DoS Attacks

                        Originally posted by Jei
                        um can you bring this up to the police and have some kinda action against such attack?
                        In most cases, especially when there is no real damage that could be expressed in money lost the police won't care. On top of that only police forces in large metropolitan areas would have any resources to actually do an investigation.

                        Even online threats often won't cause any action to be taken. The 'boys will be boys,' syndrome.
                        I use a Mac because I'm just better than you are.

                        HTTP Error 418 - I'm A Teapot - The resulting entity body MAY be short and stout.

                        loose

                        Comment


                        • #13
                          Re: Disgruntled Ex-LS Mates and DoS Attacks

                          And just for the record Sevenpoint, your LS sounds pretty cool

                          Comment


                          • #14
                            Re: Disgruntled Ex-LS Mates and DoS Attacks

                            Originally posted by Mhurron
                            Originally posted by Gentoo
                            You could have made it more interesting -- changing your DNS record to point to mail or web server of the state police where the IP was registered -- or set it to the ISP's gateway.
                            This would put you at fault for any damages that might arise.
                            I said "more interesting," no?

                            signature by fallenintoshadows

                            Comment


                            • #15
                              Re: Disgruntled Ex-LS Mates and DoS Attacks

                              A PG rated linkshell? Where's the fun in that?

                              Poo! *snigger*

                              Comment

                              Working...
                              X