Hi Scott, Are they just flooding you on port 80, or some other port?
If it's on port 80 - temporarily move the site to port 8080, put a 1 file on site on port 80 redirecting to http://127.0.0.1/ (or just disable any services listening on port 80 altogether.) For such distributed attacks - one way to remedy is to move/remove what they are attacking... :-) Is the attack just flooding you, or trying to use your tools to lookup whois, valid emails, etc? If so maybe a remedy is to make us register and confirm via email a login before we can use any tools. Having to login to use the tools would be a bummer, but better than not having the tools available to use at all. :-) Tony >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry >Sent: Thursday, November 11, 2004 5:01 PM >To: [EMAIL PROTECTED] >Subject: Re: [Declude.JunkMail] Is DNSStuff Down? > > > >>I can seem to reach www.dnsstuff.com or backup.dnsstuff.com. Are you >>current having issues? > >It was down, but should be back up soon. > >The main server is struggling right now. It's still under a DDoS attack, >but is handling that pretty well. But the data partition was destroyed by >good 'ole chkdsk -- Windows had troubles reading one (or perhaps several) >unnecessary files, and said to run chkdsk. On the next reboot (a few days >ago), chkdsk was run, and destroyed the entire partition (with log files, >cached WHOIS entries, etc.). Most of the important data has been >recovered, but while the rest is being recovered (which could take a week >or two), it's running off of just the primary partition, which is far from >optimal. And, it's going to be nearly impossible to restore the data >partition to the way it was, which may cause some odd behavior. > >The backup, meanwhile, just isn't prepared for the DDoS attack -- so when >the switchover occurred, it couldn't handle the load. > > -Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers >since 2000. >Declude Virus: Ultra reliable virus detection and the leader in mailserver >vulnerability detection. >Find out what you've been missing: Ask for a free 30-day evaluation. > > >---- >This outgoing message is guaranteed to be authentic by Message Level users. >Guarantee the authenticity of your email @ http://www.messagelevel.com. >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.788 / Virus Database: 533 - Release Date: 11/1/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.788 / Virus Database: 533 - Release Date: 11/1/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
