Hammered by DDos

[wickedPlay]

Hello all vb masters,

I've a forum (vb/3.5.4) with more than 2.5K members, and its unders ddos (2 GB/s) attacks most of the time, we managed to hire a security company in the US called prolexic.com to help us in mitigating the attacks by routing any request to the forum to them and then back to us (after/cleaning) and its working great.

The problem is that the server IP should be hidden & nobody should know about it.

>> I disabled sending/reciving any email from server to members
or the forum real IP will be exposed to direct attacks.

is there a way that i can get a smart low.price solution to email the forum members.

we are already paying USD5,000/month for the security company!

[Zachery]

All email can be sent from a remote SMTP server... not sure if thats what you need or if it will work..

[Steve Machol]

Honestly if I were paying someone $5,000 a month for security, you can be sure I'd be insisting they resolve this rather than posting here.

[Colin F]

You could also export a list of the members email addresses, and then send the emails from a mailing list software on a seperate server.

[wickedPlay]

Colin F,Steve Machol, Zachery

Thank you gents for ur quick reply

is there a way to enable only
- Report bad post.
- contact us link.

and disable the rest
- email a member
- email this page a friend
- new post notifications to members

[Steve Machol]

You would need to manually edit the appriopriate templates to remove those options.

Note: To locate a template, turn on Add Template Name in HTML Comments in the vBulletin options and look at the page source.

Admin CP -> vBulletin Options -> General Settings -> Add Template Name in HTML Comments -> Yes

[wickedPlay]

edit the appriopriate templates

could you pls explain in details if possible.

[Steve Machol]

1. Enable Add Template Name in HTML Comments as per above.

2. Determine which options you want to remove.

3. Go to the appropirtae page.

4. Right-click on that page and view the page source. Locate the name of the appropriate template.

5. Then edit that template in the Admin CP.

[thomberg]

This would be a dirty hack.
If any forms get removed in the templates you still can send the parameters by a selfwritten form.
If someone wants to DDoS a special target he would spend some minutes/hours to check that. If he is smart.

[Scott MacVicar]

Use SMTP email, I dont think it would put the source host on it.

[wickedPlay]

1. Enable Add Template Name in HTML Comments as per above.

2. Determine which options you want to remove.

3. Go to the appropirtae page.

4. Right-click on that page and view the page source. Locate the name of the appropriate template.

5. Then edit that template in the Admin CP.

guys, I'm not expert in editing templates

i tried to get support from vbulletin.org but there was no reply

_________________________________________


is there a way to enable only
- Report bad post.
- contact us link.

and disable the rest
- email a member
- email this page a friend
- new post notifications to members

-----------------------------------------------

[Scott MacVicar]

The emails was probably from db error emails, I suggest you set the technical email within includes/config.php to blank.