[Etrail]

if we can help ASA 5505 Firewall ?

how it works on

[Criot]

then can we move the server to ovh manager or only ip's + the main ip?

You won't be able to move the main IP, you'd only be able to transfer failover IPs I believe.

[Etrail]

then can we move the server to ovh manager or only ip's + the main ip?

[Neil]

Hi

Your server is an SYS which means it only has the basic Anti-DDOS Protection, if you had an OVH Server you could setup rules in the OVH Manager to block these ports etc...

[Etrail]

???

[Etrail]

Some news about this?

[Etrail]

We detect from where the attack is coming, it come from UDP port 1434 to 1434, I set rules with iptables to drop the packets, but it not help many because when the flood is bigger as 100mb server is offline so please can configure your VAC to protect us and all other your clients.

Here you can download the tcpdump logs:
http://etgp.e-trail.eu:9280/log.tgz
http://etgp.e-trail.eu:9280/log2.tgz

[Etrail]

Hi

Please provide me with your NIC handle or server address so I can look into this.

Danny

ns396418.ip-37-59-1.eu
bz8615-sys

[Dani]

Hi

Please provide me with your NIC handle or server address so I can look into this.

Danny

[Etrail]

problem with your anti ddos is that you find a hole

ddos with flow rate up to 200 MB and you can not detect this as an attack and not to block us and servers do not work

ddos by sending too many packets, thus choking link

http://prntscr.com/5ap6au

Is there any salvation here or to go on ovh?