DDoS attack on forum [Need Help]

[winniethepooh]

Hi,

You can setup via namesrevers at your domain name register. Cloudfalre works via DNS
https://support.cloudflare.com/forums/21476162-How-to-change-DNS-at-your-registrar-to-CloudFlare-s-nameservers

wow, im not stupid. i'm talking about when i go to configure my dns through cloudflare. cloudflare spits out an A record for my site that points directly at my hosts IP address. instead of the a record i need to point to my name servers in cloudflare, and cant figure out how to do it.

[winniethepooh]

CloudFlare will give effectively 0% protection without additional steps and even with additional steps it can easily be bypassed; don't expect too much protection of it unless the attacker is a complete moron.

i'm not interested in it for that feature anyway. i'm interested in its CDN. it cache's your pages so when your servers down people can still get to your site.

[Game.ruler]

Hi tumbleweed, i just set up my domain at cloudflare, changed my dns to them.
At final page it has recommended for - "Whitelist our IP set with your hosting provider and on your server".
They have provided few IPv4 and IPv6 ips.
Is this step is necessary?

[winniethepooh]

Hi tumbleweed, i just set up my domain at cloudflare, changed my dns to them.
At final page it has recommended for - "Whitelist our IP set with your hosting provider and on your server".
They have provided few IPv4 and IPv6 ips.
Is this step is necessary?

no its not, but its always a good idea. just send your host an email and say hey im using cloudflare. these are their ips. it will allow them to add an exception for cloudflare, to keep them from blacklisting cloudflares ips on accident, as cloudflare will access your website and download static content at regular intervals.

[winniethepooh]

Hi tumbleweed, i just set up my domain at cloudflare, changed my dns to them.
At final page it has recommended for - "Whitelist our IP set with your hosting provider and on your server".
They have provided few IPv4 and IPv6 ips.
Is this step is necessary?

no its not, but its always a good idea. just send your host an email and say hey im using cloudflare. these are their ips. it will allow them to add an exception for cloudflare, to keep them from blacklisting cloudflares ips on accident, as cloudflare will access your website and download static content at regular intervals.

also i wanted to add that you should probably delete the ftp subdomain they added to your dns. instead of using an ftp subdomain, just use the ip address of your hosting account. you can obtain this from your cpanel.

[Game.ruler]

Thanks winnie for youe reply, i will remove ftp account soon after my account will be started. I am thinking to search for other hosts who provide security against such attacks. Hoping to get some good hosts.

Also is there any symptoms of DDos attack, coz i dont get any errors in SMF error logs, not increased page views.
So is there anything i can be sure of that its DDoS attack, not something else?

[winniethepooh]

Thanks winnie for youe reply, i will remove ftp account soon after my account will be started. I am thinking to search for other hosts who provide security against such attacks. Hoping to get some good hosts.

Also is there any symptoms of DDos attack, coz i dont get any errors in SMF error logs, not increased page views.
So is there anything i can be sure of that its DDoS attack, not something else?

I'm not sure you are understanding that your account is active as soon as you change your dns with your domain registrar to point at cloudflares name servers.

you can set your whos online threshhold for 1 minute, and camp out on the who's online page. refresh it every few minutes. when you have a crap load of guests online, its a ddos attack for sure.

[Game.ruler]

Thanks got it. I have already changed my DNS to cloudflare. Hope it will be fine soon.
Also i checked my stats when website was up for 12 hours, There were no much pageviews than usual.
Thats why i was asking for some symptoms.
As soon as it will online be again, i will check everything and will post here for more confirmation.

[winniethepooh]

Thanks got it. I have already changed my DNS to cloudflare. Hope it will be fine soon.
Also i checked my stats when website was up for 12 hours, There were no much pageviews than usual.
Thats why i was asking for some symptoms.
As soon as it will online be again, i will check everything and will post here for more confirmation.

cool. hope all goes well

[Storman™]

you can set your whos online threshhold for 1 minute, and camp out on the who's online page.

Thats right but not all domain registrars give you full functionality in that area....

[winniethepooh]

you can set your whos online threshhold for 1 minute, and camp out on the who's online page.

Thats right but not all domain registrars give you full functionality in that area....

[Storman™]

Doh, I obviously can't read !

Ignore that !

[winniethepooh]

Doh, I obviously can't read !

Ignore that !

its all good! you obviously hadn't had your coffee yet.