Hack Forums
(Tut) Blocking SOME DDoS attacks for little or no cost - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: (Tut) Blocking SOME DDoS attacks for little or no cost (/showthread.php?tid=1505730)

Pages: Pages 1 2 3


(Tut) Blocking SOME DDoS attacks for little or no cost - Refrigerator - Jul 20, 2011

So I bought a hardware firewall on newegg it was a great buy if you want more info on it here is a link https://hackforums.net/showthread.php?tid=1505316

Here is a quick tutorial on blocking SOME DDoS attacks for no cost if your router supports it, or little cost if you buy the router.
As I said this will block SOME attacks not all, most shell booters wont be able to attack you but some botnets will still take you offline, also if you run a botnet/booter at home this will disable it so you have been warned.

The router I am using today for this tutorial is a Netgear N150 Wireless router model number WNR1000v2 cheap router that I picked up at Walmart for under 100 dollars, I will be connecting to the internet today with PPPoE.

Here is a photo of the web interface, [img]http://dl.dropbox.com/u/35568881/HF/protect/one.PNG[/img]

We will be going to block services, [img]http://dl.dropbox.com/u/35568881/HF/protect/two.PNG[/img] We will want to add a blocked service

[img]http://dl.dropbox.com/u/35568881/HF/protect/three.PNG[/img]

You will want to leave the service type as user defined and block the ports and protocols listed below you should also pick a name I just named mine one, two, three, and so forth.

Now I am sorry but I am not sure which every port goes to, I know each port is some port some type of DDoS attack uses, but if you block something you need like if you have a game on 16660 you can unblock it very easy too, The ones I blocked were

1524 tcp
27665 tcp
27444 udp
31335 udp
16660 tcp
65000 tcp

To anyone who says this is fake and can harm you send me a PM this has been verified by Cisco and I don't think they would lie to you!



* - Frida - Jul 20, 2011

lol i used to block every port on my router besides port 3074 then go on xbox and talk shit to kids who could hit, and then when I never disconnected they couldn't figure out why.
And I can 100% Vouch that blocking ports wont hurt you unless you need to use those ports for something, and in that case then just unblock them!


* - Xp3 - Jul 20, 2011

Nice tutorial, i'm sure it will help some people out 👍


* - Shellboothacker - Jul 20, 2011

(Jul 20, 2011 06:20 PM)Frida Wrote:  lol i used to block every port on my router besides port 3074 then go on xbox and talk shit to kids who could hit, and then when I never disconnected they couldn't figure out why.
And I can 100% Vouch that blocking ports wont hurt you unless you need to use those ports for something, and in that case then just unblock them!

thanks for this post, It will help me a lot!


* - Refrigerator - Jul 20, 2011

Sure everyone your welcome, this was also verified by Cisco.


* - Kosmos - Jul 22, 2011

Very nice tutorial, thanks bro! I'll be sure to use this in the future. Vouch for Hajdar<3


* - Refrigerator - Jul 22, 2011

(Jul 22, 2011 05:51 AM)GmZ Wrote:  Very nice tutorial, thanks bro! I'll be sure to use this in the future. Vouch for Hajdar<3

Thanks! Hope it helped you.


* - xZ3lLx - Jul 22, 2011

zomg you can also play xbl with your modem's Ethernet unplugged and be 100% protected from every DOS ATTACK EVER


* - Faith - Jul 22, 2011

(Jul 22, 2011 06:48 PM)xZ3lLx Wrote:  zomg you can also play xbl with your modem's Ethernet unplugged and be 100% protected from every DOS ATTACK EVER

I vouch for this method.

VOUCH.


* - HustlerAO20 - Jul 23, 2011

(Jul 20, 2011 06:20 PM)Frida Wrote:  lol i used to block every port on my router besides port 3074 then go on xbox and talk shit to kids who could hit, and then when I never disconnected they couldn't figure out why.
And I can 100% Vouch that blocking ports wont hurt you unless you need to use those ports for something, and in that case then just unblock them!

What router do you have? I'm going to buy a new router.


* - Gorhax - Jul 23, 2011

(Jul 20, 2011 06:20 PM)Frida Wrote:  lol i used to block every port on my router besides port 3074 then go on xbox and talk shit to kids who could hit, and then when I never disconnected they couldn't figure out why.
And I can 100% Vouch that blocking ports wont hurt you unless you need to use those ports for something, and in that case then just unblock them!

Yeah this is a totally legit story because all the good xbox e-fags for sure don't know that the best port to take someone off on xbox is 3074..


* - Refrigerator - Jul 23, 2011

(Jul 23, 2011 12:15 AM)HustlerAO20 Wrote:  What router do you have? I'm going to buy a new router.
Netgear N150 Wireless router model number WNR1000v2



* - lolsonlols - Jul 23, 2011

Want real DDoS protection? http://www.hardware.com/store/cisco/7606-RSP720CXL-P?campaignid=1-47513371
all your router will do is take shit from anything with a faster upload then you.


* - Refrigerator - Jul 23, 2011

(Jul 23, 2011 08:40 AM)lolsonlols Wrote:  Want real DDoS protection? http://www.hardware.com/store/cisco/7606-RSP720CXL-P?campaignid=1-47513371
all your router will do is take shit from anything with a faster upload then you.

Do you have any idea what you are talking about? You posted a Route Switch Processor I post a hardware firewall MADE for DDoS protection. Please do your research before you post.


* - HustlerAO20 - Jul 23, 2011

(Jul 23, 2011 04:27 AM)Tuna Wrote:  Netgear N150 Wireless router model number WNR1000v2

Thanks. Well I'd imagine there's more ports you need to block though. When I get DDoSed, my log shows ips from over seas with random ports like 54643.