Page 1 of 3

denial of service (attack) dos

Posted: Sun Nov 28, 2010 12:15 pm
by Peter
Dear Cantr friends,


I had a small talk with my father in law, who has been working with and against these actions for many years (up to last friday actually).

If dos should be ddos (dsitributed dos) it would mean that more computers appearently a couple of hundred send more synchronising requests to a server, in this case the cantr server. This would cause an overload of data at the dns-server. The dns server changes a name (www.cantr.net) to an ip (74.208.223.112). When you try to go to cantr.net your requests will be delayed because of the overload of requests by the dos attack. This eventually results in a time out without being connected. This is a serious problem, for cantr.net but also for the provider, afteral, the provider needs to proces the incoming requests. The solution for this is to (temporarilly) remove the name (cantr.net) and the ip from the dns list. This will not be for only two days.

A denial of service attack is the same kind of attack from one computer. This is easy to stop by blocking the incoming ip-address by the provider.

If the site is blacklisted... There are usually only two reasons for this. 1 the server is being used for illegal activities such as file sharing. The US is currently busy shutting down these kind of sites and therefor this is a good possibility. The second is unpaid bills to the isp.

I wish our Cantr staff good luck on this one...

Greets,
Peter

Re: denial of service (attack) dos

Posted: Sun Nov 28, 2010 8:47 pm
by caged_bird_sings
I really appreciate the clarification - I know next to nothing about computers, the internet, you know what I mean. Thanks Peter!

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 7:23 am
by Joshuamonkey
The ip was blacklisted here: www.uceprotect.net, but it looks like the listing goes away automatically after 7 days.

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 8:40 am
by CrashBlizz
I consider myself to be extremely computer literate but I still haven't got a clue what is actually going on...

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 8:45 am
by Addicted
No clue either and I've had it expained to me in chat. :oops: Can someone try and explain it at kindergarten level please?

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 8:55 am
by EchoMan
Some mischevious person set up a large amount of computers to automatically send a lot of requests to cantr.net. All those requests goes via a Domain Name Server (DNS) which get choked eventually, and stops working. Not just for cantr.net request, but all requests that is handled by that server.

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 9:07 am
by Snake
my boss blocked Cantr, cause I was playing instead of working :/ sry guys :(

es ist tut mir gleich - for German ppl from whom our country steals the internet

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 9:09 am
by Addicted
Thanks EchoMan, that is clear.

What about the blacklisting? Is Cantr.net blacklisted by the server provider? Or is the Server provider blacklisted by someone else?

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 9:12 am
by EchoMan
I don't know that.

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 10:44 am
by CrashBlizz
EchoMan wrote:Some mischevious person set up a large amount of computers to automatically send a lot of requests to cantr.net. All those requests goes via a Domain Name Server (DNS) which get choked eventually, and stops working. Not just for cantr.net request, but all requests that is handled by that server.



Thank you. Seems like a very odd thing to do but ok, if someone was that bored...

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 11:06 am
by gejyspa
Joshuamonkey wrote:The ip was blacklisted here: http://www.uceprotect.net, but it looks like the listing goes away automatically after 7 days.

Since the allegation from that website is that cantr.net was blacklisted for sending email to spamtraps, is it possible that the email stating that cantr is up triggered it? Are we 100% sure that all the email addresses we were given by users are legit? Did any get back 550 errors?
--gejyspa

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 11:14 am
by EchoMan
It's possible, yes. Since we don't use email verification there is no way of telling if an email address is active or not.

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 3:25 pm
by Snake
cantr is up, but why locked?

edit:
no rolling back for cantr's sake!

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 3:46 pm
by Chris
Snake wrote:no rolling back for cantr's sake!

Game time was still running while our access was blocked. Four full days passed. That means that some characters, who might have been OK otherwise, died from starvation, heart attacks, and animal attacks.

Re: denial of service (attack) dos

Posted: Mon Nov 29, 2010 3:50 pm
by Joshuamonkey
Chris wrote:Game time was still running while our access was blocked. Four full days passed. That means that some characters, who might have been OK otherwise, died from starvation, heart attacks, and animal attacks.

Cantr time can run while the server is down?

Cantr's back down, but purposefully.