Bitcoin Forum

Bitcoin => Mining => Topic started by: 2tights on January 07, 2014, 06:43:11 PM



Title: Static IP and network defense
Post by: 2tights on January 07, 2014, 06:43:11 PM
I know the main concern for attack is a DDOS attack. I have a static IPV4 address for my home network. I'm concerned that if my IP ends up on a malicious user's, or bitcoin hater's, shit-list that I may become a target. I am confident in securing my network, but I'd like to hear what network appliances people are using to protect their mining operations.


Title: Re: Static IP and network defense
Post by: Kenshin on January 07, 2014, 06:49:04 PM
If you have a good firewall then it should drop the DDOS.


Title: Re: Static IP and network defense
Post by: cp1 on January 07, 2014, 06:49:14 PM
My new router has a checkbox that says "Enable DDOS protection".  No idea if it works well.  I'm sure Cisco could sell you something, but I don't think you'd like the prices.  There's got to be something you can install in a linux box.


Title: Re: Static IP and network defense
Post by: Hax8 on January 09, 2014, 08:59:14 PM
It is really difficult to counter a DDoS. Protection built in to the router/firewall just drops the rogue packets without replying but there is no way the router can stop all that traffic from still traversing the pipe and hitting your router/firewall.

You can either:
- Have more bandwidth than the attackers which will still allow your legitimate traffic. With amplification attacks, this is very costly!
- Have your ISP block the traffic further upstream leaving your pipe free.
- Use one of the companies that provide this service which normally means you use them as a proxy hiding your true IP.
- Setup your own proxies in hosted datacentre's and hide behind those.

That is all I can think of at the moment.

If the mining setup is in your home/office, I would just pull in another internet pipe. Preferably with a different ISP and switch to that when required. Or just use a dedicated line for the miners minimising exposure of your IP to third parties.


Title: Re: Static IP and network defense
Post by: cp1 on January 09, 2014, 09:03:17 PM
You could always tell your ISP you're being attacked and maybe get a new IP assigned?  Or go through a VPN for $10 a month for all your traffic.


Title: Re: Static IP and network defense
Post by: mitty on January 09, 2014, 09:27:15 PM
You could mine or tor or use some sort of proxy service/VPN to hide your IP.