Title: Static IP and network defense Post by: 2tights on January 07, 2014, 06:43:11 PM I know the main concern for attack is a DDOS attack. I have a static IPV4 address for my home network. I'm concerned that if my IP ends up on a malicious user's, or bitcoin hater's, shit-list that I may become a target. I am confident in securing my network, but I'd like to hear what network appliances people are using to protect their mining operations.
Title: Re: Static IP and network defense Post by: Kenshin on January 07, 2014, 06:49:04 PM If you have a good firewall then it should drop the DDOS.
Title: Re: Static IP and network defense Post by: cp1 on January 07, 2014, 06:49:14 PM My new router has a checkbox that says "Enable DDOS protection". No idea if it works well. I'm sure Cisco could sell you something, but I don't think you'd like the prices. There's got to be something you can install in a linux box.
Title: Re: Static IP and network defense Post by: Hax8 on January 09, 2014, 08:59:14 PM It is really difficult to counter a DDoS. Protection built in to the router/firewall just drops the rogue packets without replying but there is no way the router can stop all that traffic from still traversing the pipe and hitting your router/firewall.
You can either: - Have more bandwidth than the attackers which will still allow your legitimate traffic. With amplification attacks, this is very costly! - Have your ISP block the traffic further upstream leaving your pipe free. - Use one of the companies that provide this service which normally means you use them as a proxy hiding your true IP. - Setup your own proxies in hosted datacentre's and hide behind those. That is all I can think of at the moment. If the mining setup is in your home/office, I would just pull in another internet pipe. Preferably with a different ISP and switch to that when required. Or just use a dedicated line for the miners minimising exposure of your IP to third parties. Title: Re: Static IP and network defense Post by: cp1 on January 09, 2014, 09:03:17 PM You could always tell your ISP you're being attacked and maybe get a new IP assigned? Or go through a VPN for $10 a month for all your traffic.
Title: Re: Static IP and network defense Post by: mitty on January 09, 2014, 09:27:15 PM You could mine or tor or use some sort of proxy service/VPN to hide your IP.
|