I am confused. You mean ppl who ddos do not even spoof their src ips from subnet related to the one they are on or random?
Sending out emails might mean sending emails to the wrong isps.
Once they are notified they can see if there was traffic or not and decide weather it was spoofed or actually coming from their machines. this just sends a notification for them to do internal investigating. |
|
|
|
|
Script has been added my original post
|
|
|
|
Just publish the script right here. Lots of people will find it maybe years down the road and use it. There is really no reason to hide those behind PM's.
Great point i will post it up here as soon as i have access to a machine with a decent connection. |
|
|
|
|
Hi all,
We have enabled Variable difficulty on this pool. This will ensure you miners are more efficient then ever. This will also make the pool much more efficient while decreasing load on the backend.
I will be doing a write up on what exactly vardiff is and how it will help you as miners. give-me-ltc is also going to be updated to support vardiff in the next few days.
|
|
|
|
Rather impossible. Because somebody who has a botnet. With a 0day exploit or even a crappy older exploit, he can increase that botnet by 500-1000 bots in a week or two. And your emails are going to shut down what? 200-300 of his bots in a week... So it's a race. You can't win. And even if you shutdown one botnet, there will be 10 others to take the DDOSers place. The only way to stop DDOS is to pay for DDOS protection  Agreed with you 100%. This is not a solution to stop them per say not is it a replacement for ddos protection and it never will be. You are correct we can never stop them. but if we can take down some of the bots and make users aware of certain programs used for botnets it could make the attackers job that little bit harder. Again this is not going to stop ddos attacks or is it a replacement for ddos protection. Its a simple way we can help make users aware of exploits and unwanted programs on their machines and servers. Surely shutting down 200 - 300 a week is better then a extra 200 - 300 bots in their army. |
|
|
|
I'm sure you are all aware of the recent DDOS attacks on multiple pools and services in the crypto community. Our Pool was one of the pools hit in these attacks. These attacks are damaging the reputation of crypto coins and causing mass panics. i'm sure most pools have invested or are investing in some form of DDOS protection most of which will keep logs of any attack that happens on your pool. Now these are great but if you claim to be DDOS proof you would be lying nothing is DDOS proof if the attack is big enough some might even see it as a challenge. We can all help to stop these attacks or at least shutdown some bots and i will tell you how right now. Khaos and myself have developed a script that will analyse log files captured from a ddos attack split it up into subnets, find what company is in charge of those addresses and send them an email with the logs attached stating that a DDOS has come from those IP addresses. The company's must act on these emails as doing a DDOS is a crime. I know it will not stop these DDOS attacks and they can get more bots quite easily but it will reduce their attack power and help make users aware that their machines are compromised and how to stop this happening. If you would like a copy of the script you can find it here. http://pastebin.com/ZN0bqrKSThanks for reading |
|
|
|
We have updated out feathercoind client to the latest version and applied all patches . miners may have had a disconnect due to this. |
|
|
|
serraz, Are the stratum connections working? I'm confused by the number of server options. The servers closest to me don't seem to support stratum, so they should be less efficient than stratum servers. It looks like only one of the servers below supports stratum. What server do you recommend for best performance, and does it support stratum? This is from your website: Now, point your "scrypt" miners to this pool server: If you recognize the hard work that as been put into this pool, you can use the new donors only server. stratum+tcp://stratum.give-me-ltc.com:3333 (Stratum Server: available to everyone) Note: If you use a miner without stratum support please see faq page for instructiosn on how to setup a stratum proxy. http://pool.give-me-ltc.com:8080(Main Server: available to everyone) http://pool-d.give-me-ltc.com:80(Donors only) All pools have US and European mirros. To obtain maximum hashrate select nearest server: http://us-pool.give-me-ltc.com:8080(US Main Server) http://eu-pool.give-me-ltc.com:8080(Europe Main Server) http://us-pool-d.give-me-ltc.com:80(US Donors Server) http://eu-pool-d.give-me-ltc.com:80(Europe Donors Server) I would always reccomend using stratum. We do have plans to upgrade the "doner" server to include its own stratum specifically for donators but things have been slowing that down. |
|
|
|
Will be implementing idle worker notifications here tonight also . |
|
|
|
Worker down notification is now available. Hey all,
Quick update for you. If you miner got kicked off just then it is because the attackers are now getting really desprate and trying all sorts of new attacks oh mist of teh major LTC pools. We are on the case straight away and it only seemed to affect some users.
Keep trying to reconnect and if you are having great difficulty shoot us an email so we can take further steps to get you connected and stay connected.
I appoligise for all these connection issues over the last few days we are tryign our hardest to help keep things running smooth and your feedback ideas and patience is really helping us fix these bugs.
To enable idle worker notifications you just simple go into your workers page a tick the notifications box. You will be notified if you miner has been mining and suddenly stops on a 10 min basis. i have already made the announcement on the forum and will update the site when i get home tonight. On a side note. It looks like freenode is being ddosd at this point in time so the chat may be down. I am working on my own chat solution which i hope to have up very soon (No ETA yet). Please continue to email us with any issues or concerns you may have. Serraz, |
|
|
|
just got my risers great condition and great quality! have not installed them yet but i dont think there will be a issue at all. |
|
|
|
|
Hey all,
Quick update for you. If you miner got kicked off just then it is because the attackers are now getting really desprate and trying all sorts of new attacks oh mist of teh major LTC pools. We are on the case straight away and it only seemed to affect some users.
Keep trying to reconnect and if you are having great difficulty shoot us an email so we can take further steps to get you connected and stay connected.
I appoligise for all these connection issues over the last few days we are tryign our hardest to help keep things running smooth and your feedback ideas and patience is really helping us fix these bugs.
|
|
|
|
Come back from being gone all day and I'm getting 50% rejects on all my workers. Any ideas why? [2013-05-11 22:32:12] GPU0 | (5s):0.000 (avg):601.2Kh/s | A:5933 R:4766 HW:0 U:9.5/m I:20
i think it might have to do with the protection. ill certialy check it out 50% is far to high. if it keeps going up please email me i have some ideas that could help you alot |
|
|
|
Hey guys. You might notice higher stales or some dropouts. This is due to several DDOS attempts which were blocked sucessfully some legitimate IP addresses may have been blocked due to the attackers spoofing IP addresses. Things seem to be setteling down now and connections and stales returning to normal.
Looks like our hard work is paying off. We are surley getting there.
Thanks for your support.
Best of luck serraz. we also getting hit non-stop last 24h or so. The protection is holding up, but those mofos are consistent  Yeah it seems to be a attempt to cause a market panic. Ive noticed soem patterns in the attacks in both size and duration. As well as some of the IP addresses. Lets seem what more info i can dig up  |
|
|
|
|
Hey guys. You might notice higher stales or some dropouts. This is due to several DDOS attempts which were blocked sucessfully some legitimate IP addresses may have been blocked due to the attackers spoofing IP addresses. Things seem to be setteling down now and connections and stales returning to normal.
Looks like our hard work is paying off. We are surley getting there.
Thanks for your support.
|
|
|
|
The net stats Difficulty Next calulator is way out, it read over 100 too high on the site compared to the actual LTC difficulty that occurred a couple of min ago. This one was accurate: https://www.litecoinpool.org/statsYes it is inaccurate at teh moment because its calculating difficulty based on hashrate not average time of blocks solved like the one on litecoinpool. All the rest of teh info is pulled directly from the litecoin daemon. Its on my list of things to fix but there are more pressing matters to deal with at the moment. |
|
|
|
OK so I gave it another shot, first few workers connected fine, then as I tried to add a few more while doing some overclocking tweaks to them (starting and stopping the workers repeatedly), then they were unable to connect. So Im guessing you are only allowing a limited number of connection attempts from a single IP as a form of DDOS defense.
But its a double edged sword, because I need to connect over 12 workers from one IP and there are times I need to test OC stability and connect and reconnect. If there was some way to verify my IP as legitimate and allow it, say 50 connection attempts in a 24 hours period, that would be great because as the pool is right now, I cant use it for more than a few workers, and certainly not for stability testing.
Agreed its very anoying that legit miners are being blocked out. We have made soem changes and more miners are able to connect. Rather then us chattign here is it possable for you to jump on IRC or add me on gmail and we can troubleshoot in realtime?? Im very sorry its takign solong for us to iron out all these issues. Hopefully we get them fixed soon. |
|
|
|
|
Dont worry we are always tweaking. A lot less connection problems today still got more work to do but we will get there.
Its great that users are emailing us and letting us know all this it all helps.
Keep it up guys thanks heaps!!
|
|
|
|
Our protection system detected a new DDoS attack during the last ours that was successfully blocked . During the attacks some valid connections have been blocked on ports being attacked, so we recommend all miners to keep trying different ports. We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems. All pools the pool you have are currently dead.. I had a different miner on each one to stop downtime as much as possible but they are all getting "cant find server"
The port change work around unfortunately didn't do anything :/
I assume you are getting all these DDOS attacks because give-me-ltc.com is the largest LTC pool controling the highest abount of network hashrate? If so looks like an attempt to lower the difficulty by taking hashrate offline? I have used you since finding you mid April and all was brillaint until 2nd May. Then it's been trouble ever since difficulty jumped to 492. M it could be. Its unknown but it seems to happen quiet a lot to mainly the top 5 pools. But others have had it also. |
|
|
|
All good now, thanks. Will email for future reference.
cheers for the notice tho . I guess it was a good test for the firewall :\ luckly it wasn't down for to long |
|
|
|
|
Show Posts
