杯具，VPS被暂停 UDP flooding

Captain

用iptables封掉对外udp

iptables -A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
iptables -A OUTPUT -p udp -j DROP


然后保存使重启后还可以继续生效

/sbin/service iptables save

[ 本帖最后由 Captain 于 2011-1-4 02:16 编辑 ]

domin

你跟他们说你的站被黑了被放了攻击软件, 保证以后不发生.

domin

数据是否有备份? 如果有的话最好重装一下. 因为有可能一开了就又被利用攻击的.

Captain

原帖由 jamimes 于 2011-1-4 01:24 发表


嗯谢谢。

现在他们不肯开VPS给我。

发觉最蠢的支付方式就是年付了 ，唉

更新了下规则，下次对外udp的话直接用这个规则就行

domin

Hello,

Sorry about the trouble my VPS has been causing.
After I talked to my system admin, it appears the outbound UDP flood was caused by one of the PHP coded business sites hosted on the VPS has security exploit, a hacker uploaded a PHP UDP flood attack script and used it to attack other servers.
I would like to ask you kindly unsuspend my account and reinstall the VPS so the hacker no long able to use attack script.
I will use iptables to block all UDP traffic in the future.
I can assure you my VPS will not cause anymore problems.
Please give me another chance.

Best Regards,
xxxx