Question about being DDoS'd

[Uilamin]

Soo.. what happens if the hardware being used to DDoS the server is capable of running indefinitely?

Depends on the type of DDOS attack. If it is from a botnet, then until related virus gets removed/patched from all the computers on the botnet. If it is from a single computer (or small network), it can go until it gets shut off. If it is a DDOS of the later category, I strongly doubt that the DDOS is happening continuously, but being launched at inopportune times - in which case, it will stop as soon as the person launching gets bored or forgets. If it is the first case, it is probably someone just testing their botnet to ensure it works. The attacks will persist for a short while so they can measure 'effectiveness' and then they will shut it down as there is probably little to gain from targeting a private server with a botnet.

[Uilamin]

How would he get caught? DDoS are nigh impossible to trace. How would he get stopped?

It depends on what the starting point of the attacks is. If it is a botnet, you probably will not find the creator. If it is an individual spoofing their IP or whatnot, you may be able to trace it with enough work.

[Grimson]

So why not take the server completely offline? Shut power off to it, Or is it like a virus that is a program once embedded its there. I thought DDoS was denial of service, if there is no server online doesn't the attack stop? Take it offline, no power etc.. for a day or so change the IP so the attack doesn't resume on the same IP once it comes back online.

Im asking based on limited knowledge of how domains, IP's and servers work, and seriously asking WHY is it so hard to stop a DDoS.

[Grimson]

According to this a DDoS is basically sending more requests to a server than it can handle thereby crashing said server.
http://computer.howstuffworks.com/zombie-computer3.htm

[Gnelson82]

According to this a DDoS is basically sending more requests to a server than it can handle thereby crashing said server.
http://computer.howstuffworks.com/zombie-computer3.htm

DDos is a broad term for several methods. That is the most common. Most of the solutions to this problem revolve around actually knowing the IP address of the attacker. Log files can be useful both in tracking down and stopping the attack. If several ISPs cooperate, it may also be possible to find out who the hacker really is by using these logs. The ISP can also block the attacker using packet filters on their routers, but this would introduce a host of new issues. ISP's explaining this to potential customers, or customers calling in for tech support, opens a new arena of problems. Forcing packet filters on a router for all customers would probably kill torrents as well. The botnets are the most difficult to trace, but it can be done. I'm sure we have already contacted the hosting provider for this server. That would be an important step when this all started. Most hosting providers and ISPs post emergency contacts on their sites. If they have a general contact number, we would explain that we are under attack and ask "the customer service agent" or whomever handles this, to escalate our issue to operations staff with the authority to investigate it. That may be the best option, and could also be what is still happening as well. I don't expect them to share tons of details with us. They don't have to, and do not owe us anything. We owe them continuing gratitude for putting up with this nonsense as long as it takes.

[Uilamin]

So why not take the server completely offline? Shut power off to it, Or is it like a virus that is a program once embedded its there. I thought DDoS was denial of service, if there is no server online doesn't the attack stop? Take it offline, no power etc.. for a day or so change the IP so the attack doesn't resume on the same IP once it comes back online.

Im asking based on limited knowledge of how domains, IP's and servers work, and seriously asking WHY is it so hard to stop a DDoS.

A botnet can be a virus on OTHER people's computers that allow someone to hijack those computers to spam a target. The virus on those computers tell where a computer should contact to get instructions and then those computers will operate independently spamming a target (usually an IP address) until the virus is disabled or their instructions change.

[Bacta]

Best way to prevent DDOS is upping bandwidth. But that costs money.It would be kind of nice to have some redundancy with a secondary server that would take over with a separate IP. Or even a load balanced server.

[PreddyIta]

Because they are attacking and for what purpose? In the end we're not hurting anyone.
At least it's not competition, I hope to be wrong....

... Although I am very sorry that the our GM's and all the Staff should suffer these DDoS attacks unjustly.

[Booty]

Because they are attacking and for what purpose? In the end we're not hurting anyone.
At least it's not competition, I hope to be wrong....

... Although I am very sorry that the our GM's and all the Staff should suffer these DDoS attacks unjustly.

Probably because someone or more got banned for poor behaviour. They're obviously very buttmad about it, and this is their way of getting back at the admins.

[powerheads]

i think those guys attacking the game server and dont trying to put down web server just to have monitoring of situation. so when we are saying such things, they know that they are doing right things for their own opinion. There is nothing difficult to put down web server in the same way. they just getting their part of pleasure, part of money, doing that. And all new threads started here makes them want to dont stop and bring it to the end. Lets stop that crying and moaning. I bet it will finish a day or two. Longer it goes, higher the risks for that ... guy, so he will finish it.
You guys motivating them/him/her not to stop trying to harm server. And i dont know what staff is going to do. Just appealing to the problem wont resolve it.
im sorry for my english.