just wow. Does the one that builds servers work in a NOC? Traffic from large DDOS attacks has to be rerouted. Tis common for whole switch to be effected by such an attack. firewall isnt going to block it. zombie horde(ddos) at you door(firewall computer doesnt matter) you need to move them before you can get out to the street(internet). MS just reroutes the ddos traffic.
NinjaX2 - youre wrong with absolutly no credentials to back your stuff up.
I am not wrong...If someone gets bots into your network sure. They can ddos from the inside.
DDos from the outside to someone's external interface is pointless with a legitimate firewall.
yes I work in a NOC..I have worked in datacenters multiple times throughout my career. I used to support 50 different international companies at once!.
I currently support servers that have over 65 million registered players. With 800-900k concurrent users / players at any given time and support the network with all of the employees as well.
None of those servers are down, and they are all around the globe. No lag..they run perfectly your more than welcome to give it your best shot.
You can say I do not have the credentials. You can say I do not know what I am talking about.
Ask most anyone here and they will tell you. I am not gonna argue with you bit you have a bot on your internal machine at home DDOSing you then you are retarded.
If you have a legitimate hardware firewall you can not DDOS the person directly.
If you really want to risk DDOsing an ISP switch or router be my guest. But then your knocking out an entire area of people, and finding that IP address is more complicated than sniffing someones IP with cain and able like most noobs.
Again I am not gonna sit here and argue with someone who wants to argue and try to prove me wrong.
You like to say "Ninja you are wrong" but with no real information on how you intend to back that up.
A real firewall, can not be ddos'd You would never make it past the firewall to hit my connection. The firewall I have configured would drop any traffic it wouldn't even process it. You wouldn't even be able to send data at it much less attack it.
Our connections are like ghosts. I know the IP's...I know where they sit. But I can't hit them with any data.
Its a pretty simple process.
I mean think about it...banks...blizzard....any massive corporation you can think of is not open to DDOS attacks...unless it is absolutely massive and pinpointed attack on a place that they know to be weak.
Otherwise there is redundancy and secondary connections in place anyways..but the fact remains.
I have firewalls that will automatically block IP's that it believes are ddosing it..by looking at packet size and number of attempts.
Then it sends me logs...
again dude I can go on forever and ever. I have two firewalls sitting in the other room. And I could probably buy your house, and pay off your car with what we paid for just ONE of them.