2004-05-31 unix servers

We're having a bit of an accessibility and speed issue with the H-Sphere unix boxes. Possible DoS attack--the line to that cabinet's switch is almost saturated. Checking.

[admin]

Boy close to 200 MB and never went down LoL...

We are looking in to who it was now but they seemed to of stopped for now. Guess that was a good load test for the router at least..

All seems good as of right now but we will keep an eye on it..

[mresell]

I wondered what was happening. Didn't last long.

[admin]

222.103.15.0/24 was the IPs attcking us. They have stopped now. But we may still block them if needed.

Korea, again. If they built cars like they run their networks... oh wait, they do. :P

[mresell]

....lol....

[tkraffty]

Originally Posted by alexc

Korea, again. If they built cars like they run their networks... oh wait, they do. :P

One of my customer's sites was having problems with Vietnam and Korean-based (or originating) hackers a few weeks back, and before they sniffed out a password and wrecked some serious havoc with his sites, I also suspect the same gang was behind some DoS attacks that were launched the day before.

Long story short... I'm wondering if there's a server-based option we resellers might obtain ourselves or some configuration we might request through Vortech which would allow us to filter traffic from certain countries to certain sites alltogether. If I could block Vietnam or Korea from my client's site completely, maybe I could finally I return to sleeping with both eyes closed...

TK

[newmem]

"before they sniffed out a password and wrecked some serious havoc"

what can we do to prevent this in any of our password protected pages except use difficult passwords? are ALL protected pages hackable??

[somereseller]

You can make your passwords as difficult as you want. If someone can read it, he can just do a xcopy and paste.
Hsphere is unsecure by design. Passwords can easily be obtained if you use Hsphere's bundled applications and FTP.

[newmem]

even if I create a difficult 10 character password, it would be possible to crack it? not only the hosting accounts, any of the programs/websites where I am a member of? or it's possible only to crack passwords that can be found in the dictionary? I use a software to create difficult passwords that make no meaning.

[somereseller]

Don't use webshell, FTP, POP3 and IMAP, and use SSL for your cp. It should help keep your passwords private.

If you don't do that, your neighbour can manage your account for you and send emails with your email accounts.

[newmem]

Originally Posted by somereseller

Don't use webshell, FTP, POP3 and IMAP, and use SSL for your cp. It should help keep your passwords private.

If you don't do that, your neighbour can manage your account for you and send emails with your email accounts.

I cannot work without using those features! if cracking passwords was this easy, then how come hackers do not loot all the paypal accounts?

[somereseller]

This is getting way off topic...

Paypal uses SSL and asks you to set a password on their SSL protected pages. So nothing to worry about there.

Hsphere sends passwords in CLEAR TEXT.

[Brangwyn]

Still .. the actual chances of you having your password "sniffed" over the net is actually pretty low, the vast majority of password hacks that occur are actually via exploits in the backend application that stores the passwords.

I'm not saying you shouldn't secure yourself as best you can, but I'm also saying that it shouldn't be cause for paranoia and panic either.

And yes this is way off topic now .. wheres that moderator button so I can clean things up

[mresell]

Originally Posted by somereseller

Don't use webshell, FTP, POP3 and IMAP, and use SSL for your cp. It should help keep your passwords private.

If you don't do that, your neighbour can manage your account for you and send emails with your email accounts.

I don't agree this is totally off topic. DoS attack= security concerns.
somereseller is saying use diff non-standard encrypted options. The standard ones are not encrypted i.e. things fly around in clear text. I made a pseudo list of considerations in this post.

http://forum.vortechhosting.com/show...1&postcount=10