Hey!
I use the built in webserver in POL to have auto account creation. But as of 2 days I been under a DoS attack on the webserver due to the guy getting caught cheating. Any way to make it more secure on Pol 095? Or is that something that requires a newer version?
Or is there any way to make it create accounts in another way then using the built in webserver? My normal webserver is on the same computer and it is protected by the firewall.
Right now I shut down the internal webserver so he have nothing to attack, but I need auto account creation.
Hope you can all help me.
Adding extra security or another way for auto acc?
Re: Adding extra security or another way for auto acc?
Things you shall know:
- WebServer is an open port to attack you ( its not DOS attack ). Looka t your account file. Someone ask the server to create too many accounts at a time and this is why you lose connection with server. DOS attack doesnt need pol running on your comp...
- POL096 enable packets so you can activate auto-account creation that Montuz edited for us and you can find a good version of it in the distro097. This way you can look at my fantasia distro to create only 2 accounts by ip. So atleast you do not stop someone asking the server to create account but you kill all the process of it so it might work. Maybe look at your firewall and just annoy the ip by blocking it. If you repeat this over and over the "hacker" will stop if he is a newb. And it seems to be a newbie...
- WebServer is an open port to attack you ( its not DOS attack ). Looka t your account file. Someone ask the server to create too many accounts at a time and this is why you lose connection with server. DOS attack doesnt need pol running on your comp...
- POL096 enable packets so you can activate auto-account creation that Montuz edited for us and you can find a good version of it in the distro097. This way you can look at my fantasia distro to create only 2 accounts by ip. So atleast you do not stop someone asking the server to create account but you kill all the process of it so it might work. Maybe look at your firewall and just annoy the ip by blocking it. If you repeat this over and over the "hacker" will stop if he is a newb. And it seems to be a newbie...
Re: Adding extra security or another way for auto acc?
*Edwards wrote:Things you shall know:
- WebServer is an open port to attack you ( its not DOS attack ). Looka t your account file. Someone ask the server to create too many accounts at a time and this is why you lose connection with server. DOS attack doesnt need pol running on your comp...
- POL096 enable packets so you can activate auto-account creation that Montuz edited for us and you can find a good version of it in the distro097. This way you can look at my fantasia distro to create only 2 accounts by ip. So atleast you do not stop someone asking the server to create account but you kill all the process of it so it might work. Maybe look at your firewall and just annoy the ip by blocking it. If you repeat this over and over the "hacker" will stop if he is a newb. And it seems to be a newbie...
Hmm, im thinking maybe adding an ip check to the acc creating? Only allowing IPs to connect to it once per 2 hours or sum. Guess that could be done? Banning IPs is not an option since using proxys are hella easy :p