Forum extremely slow?

[enouwee]

Apache and IIS also have bugs so better don't use them, right?

Hope you get it...

Sorry, not really, no.

 

[Bluewind]

Probably a security setting - we host another site (Silkroad Forums) which is DOS attacked alot so that is probably a setting to combat that.

DOS attacks don't need pings.

Also see RFC1122 3.2.2.6.

edit: If your are being DOSed write to the abuse team. They normally shut down the attacker.

 

[The Helper]

I did not say we were being DOS'd. I said we have been and often are attacked. The fact that th.net does not return pings, is as I said, a security setting we have enabled. It is not a bug, it is working as designed. :thup:

 

[Bluewind]

I did not say we were being DOS'd. I said we have been and often are attacked.

I know, but that is normal and not a reason to disable usefull services.

The fact that th.net does not return pings, is as I said, a security setting we have enabled.

Sorry, but I don't know why disabling that is more secure. Please tell me.

It is not a bug, it is working as designed. :thup:

Never said it could be a bug.

 

[duyen]

Never said it could be a bug.

Nor did he say that you did.

 

[The Helper]

enouwee answered your question already

Some of the ICMP payloads aren't exactly innocent and one can do "funny" things with them.

This site already provides tons of useful free services - a return ping is not one of them though.

 

[enouwee]

I know, but that is normal and not a reason to disable usefull services.

Sorry, but I don't know why disabling that is more secure. Please tell me.

Because these packets don't provide an essential "service" to end-users and as such aren't being answered. There is no way to guarantee that the source IP hasn't been spoofed and to prevent the server being used as bounce, ICMP echo requests and responses are being dropped before they're handled by the OS.

The "usefulness" of this service is clearly outweighted by the potential harm it is to both this server as others targeted through it (be it bandwidth exhaustion or raising monthly traffic).

 

[Bluewind]

Well I see we have different opinions so I won't talk about that any more.

 

[The Helper]

Well I see we have different opinions so I won't talk about that any more.

That is much appreciated because enouwee's opinion is the one shared by the Administration of TheHelper.net (that means Ace) and I am not about to get him in here arguing about it.