Hi guys,
I am looking for a way to protect my botnet from getting disconnected from irc when someone tries to nuke them or flood attack them. I heard it was pretty easy to knock em off irc, if you know how to attack the windrop. Now, is there some kind of script against such attacks, or some config in the bot, or am I paranoid?
I reality, there is no way in hell to stop such an attack. If some1 want to attack so bad, they will.
If the flood is channel based, IE, joining and parting, sending flood notices and channelas messages, then you can protect the bot to certain extent. A good script for this, is sentinal.
As for nuke's and packet floods. The only way to stop this, is to ask your ISP to block them at the router, which is doubtful.
Alternativly, you can keep up to date on important updates (preventing any ability, to crash the computer).
As for packet flooding. If this happens, all you can do, is sit it through.
While you can have a firewall to do all this, all it does is provide packet filtering. Stoping responces that can be used to indicate your machine is alive, and prevent a trojan on your computer phoning home. WHat it can't do, is filter an attack.
This is because, the physical packets, are still coming down your connection, thus the saturation that cuases ping out's, is still there.
