XF 2 Tip How to stop a DDOS in No Time ;)

[Thanos Crax]

Basically u can be ddos'd anytime by anyone in today's time

however there are many solution and the best is Cloudflare
Ill tell u the best ways and u dont even need to spend a peny

A: When u think smth is wrong and page is loading late or sever not found
"ACTIVATE ATTACK MODE!"

[This wont stop the whole DDOS but just show a javascript page to everyone who visits and it is also bypassable....]


B: Then go to Firewall and then Firewall Rules

Here we will make our own Rules to stop the bad traffic and only let the good bois enter the premisis

Now you gotta use a little piece of your brain


These 4 rules will let ur site stand that DDOS and fight it [Like Batman Vs. Superman]

1. This Firewall Rule will show captcha to all countries that have the most probability from where the DDOS is coming from
   how to make it?
   Click on create firewall rule
   

   

   
   
   Add this:
   

   (ip.geoip.country eq "CN") or (ip.geoip.country eq "CA") or (ip.geoip.country eq "RU") or (ip.geoip.country eq "GB") or (ip.geoip.country eq "UM") or (ip.geoip.country eq "FR") or (ip.geoip.country eq "DE") or (ip.geoip.country eq "PS") or (ip.geoip.country eq "JP") or (ip.geoip.country eq "IT") or (ip.geoip.country eq "US")

   
   

   

   
   Select Challenge(Captcha). At last deploy!
   
   WHAT WILL THIS DO?
   It will show a Captcha to everyone from that country and "NO DDOS CAN BYPASS A CAPTCHA" Unless.....(Kryptonite)
   
   If u think u want to block them out
   

   

   
   Easy xD
   
   If v1.0 did not work disable it and move to v2.0
   ​
2. Now in v2.0 we will block every cock sucker on earth except the guy who is reading this thread
   Choose your country in value and if ur from somehwere in EU/US I wouldnt recommend doing this since it might give them a passage to ddos
   
   
   
   
   
   Just incase you are from EU/US:
   
   
   
   🧊🧊🧊
   
   Incase You want u can block all traffic using this method totally [Your web wont be accessible by anyone on earth except Antarctica LOL]
   
   
   
   
3. This one's similar to the one above only I just keep it separate so Its quickly useable
   
   
   
   
   
4. Some people might be using Tor proxies to DDOS so we can also block those by:
   
   
   
   
   
   That's it now your good to go and once the guy is tired in a few hours jump your website back
   [Dont forget to turn off the options later bcs once I did and some people get annoyed by the fukin Captcha YUKKK]
   
   Hope this helps <3

 

[sucre13]

it does not always protect that depends on the type of layer in the attack

 

[void]

it does not always protect that depends on the type of layer in the attack

sucre13In most cases, the above method prevents against Layer7 attacks. Layer4 attacks shouldn't be a problem when using Cloudflare, unless the IP of the server is exposed by using a mail server installed on the backend (mx records). Ideally, you should always use a proxy with appropriate rate limit configuration over Nginx that filters and blocks potential attacks (frontend - backend configuration). Cloudflares rate-limit feature is useless in this case, unless you wanna pay for it (only 10.000 req in free plan). In this context, the mail server should also be deployed on a separate server.
Furthermore, it should be said that the IP can also be leaked via email headers. These points should be taken into account as a matter of principle.

 

[Thanos Crax]

In most cases, the above method prevents against Layer7 attacks. Layer4 attacks shouldn't be a problem when using Cloudflare, unless the IP of the server is exposed by using a mail server installed on the backend (mx records). Ideally, you should always use a proxy with appropriate rate limit configuration over Nginx that filters and blocks potential attacks (frontend - backend configuration). Cloudflares rate-limit feature is useless in this case, unless you wanna pay for it (only 10.000 req in free plan). In this context, the mail server should also be deployed on a separate server.
Furthermore, it should be said that the IP can also be leaked via email headers. These points should be taken into account as a matter of principle.

voidYup protecting the IP is important or else all of this would kinda be useless

 

[BattleKing]

Yup protecting the IP is important or else all of this would kinda be useless

Thanos CraxI recognized that some people create and provide such a diagrams with all the information behind



Anyone know about that ?

 

[void]

I recognized that some people create and provide such a diagrams with all the information behind

View attachment 22506

Anyone know about that ?

BattleKingLooks like dnsdumpster and yes, I know such information charts (Idk how to call them). There's also a way to find out an IP address via censys or other data collecting sites.