How can i defend a DDOS attack

[palmy100]

Hi,

Router = BiPac 880NL R2.

We are experiencing an amplified reflection DDOS attack - CLDAP - port 389 UDP. This is attacking our Windows Server SBS 2011 (Win Server 2008) - I've found some advice online about setting a Local Security Policy on the Server to block UDP 389 but that results in Active Directory breaking so my users can't authenticate.

Is there a way to set up the BiPAC router firewall to stop this. I've looked at Incoming Filters but not sure how to configure it properly.

Thanks in advance.

[billion_fan]

Hi,

Router = BiPac 880NL R2.

We are experiencing an amplified reflection DDOS attack - CLDAP - port 389 UDP. This is attacking our Windows Server SBS 2011 (Win Server 2008) - I've found some advice online about setting a Local Security Policy on the Server to block UDP 389 but that results in Active Directory breaking so my users can't authenticate.

Is there a way to set up the BiPAC router firewall to stop this. I've looked at Incoming Filters but not sure how to configure it properly.

Thanks in advance.

Try following the attached screen shot

[palmy100]

Thanks - fingers crossed that this works for us. Looking good at the moment.

[anajames]

Its a very hit or miss. Contrary to most providers ways of doing it, IP’s are generally assigned for DSL service. Sometimes Disconnecting the connection for a bit will hault the attack and provide you specifics on it.