XR 500 Destiny 2 Ddos

[MomoMedic]

Couple of days ago me and my team we were ddossed while doing competitive. Thanks to the router i was fine but my friends were disconnected twice in a row from the same team. I've waited some time to post the thing to research the opponent a little and have the confirmation that they're ddosser.

Can i ban those guys through the DumaOS and avoid them definitely? I've to ban the whole squad to avoid the team at all or just one of them is enough? My strict mode should be up to be sure that the ban works?

[Bmann]

Welcome to Destiny competitive gameplay   You would have to disable autoping to block those users if you knew the ids to block. A better bet maybe would be blocking the gamertags on xbox live if thats what u are using.  This is why I was using geo filter to help get away from the dossers. Just last week a teammate was dossed offline but we still won the match with 3 of us.

[Netduma Admin]

You can block them through Allow &Deny - which in Destiny should in theory block them from hosting a game you play on. See the Allow & Deny section of this guide: http://support.netduma.com/en/support/solutions/articles/16000077072-dumaos-optimal-settings-guide-geo-filter

[MomoMedic]

44 minutes ago, Bmann said:

You would have to disable autoping to block those users if you knew the ids to block. A better bet maybe would be blocking the gamertags on xbox live if thats what u are using.

I'm on PS4. As i readed here i've already opted out for the autoping and blocking any gametag/psnid won't do much since they were recovering account so i thought that blocking their id in the modem would stop the Ddosser directly since i was banning his ip (or sort of) so no matter the account he's playing he should not be able to bother me.

 

28 minutes ago, Netduma Admin said:

You can block them through Allow &Deny - which in Destiny should in theory block them from hosting a game you play on

I've readed the guide but doesn't specify 2 things: the game where the ddos happen is usually a 4v4 and i've no clue who of the 4 is attacking us so i've to ban all the member of the enemy team or one is enough? Second thing the ban is istantaneous or i've to reboot the console/router or both? On top of that does that works also in a game that i host or not?

[Netduma Admin]

On 2/15/2019 at 4:54 PM, MomoMedic said:

ban all the member of the enemy team or one is enough

I would ban all of them given you're not sure who it is

On 2/15/2019 at 4:54 PM, MomoMedic said:

econd thing the ban is istantaneous or i've to reboot the console/router or both? On top of that does that works also in a game that i host or not?

No need to reboot anything, it will just take about 2 minutes to activate after you cease connecting to them. This is a deliberate anti-cheat measure (to stop people using it to boot players out of their game).

In Destiny yes, it should work if you host the game but I'm not 100% certain as it's not something we have tested. But yes, in theory, it should work.

[MomoMedic]

Thanks for the replies. Since my first post we were hitted once again and i saw only 3 peoples in the geofilter not 4 and after i've banned them all i've never saw them again. If something else happens i will update here or make a new post

[Netduma Admin]

Awesome, thanks for the update.

[MomoMedic]

After another night of grind (we had around 15 games) we found that the vast majority of them was really laggy and with peoples way outside the geofilter radius with the strict mode on (again i'm playing from europe ad we matched a team from chile). While i was fidgeting again with the setting i went to check by curiosity the router's log and found that we were attacked in around 10 of the 15 games.

The logs were kinda full of this kinda of entry:

[DoS Attack: TCP/UDP Chargen] from source: 212.64.111.52, port 46102, Monday, February 18, 2019 23:21:45

[DoS Attack: ACK Scan] from source: 31.13.86.49, port 5222, Monday, February 18, 2019 23:18:05

And in this case the ip was something always outside my network but then again i've found also this kind of entry

[DoS Attack: Land Attack] from source: MY WAN IP, port 3075, Monday, February 18, 2019 22:21:16

Having literally no experience in this kinda of things what should i do? The attack from my wan could it be something misdetected from the XR500 or maybe my ISP modem was trying to do something with the XR500?

[Netduma Jack]

3 hours ago, MomoMedic said:

Having literally no experience in this kinda of things what should i do? The attack from my wan could it be something misdetected from the XR500 or maybe my ISP modem was trying to do something with the XR500?

Hi, welcome to the forum! There's a couple of misunderstandings happening here, so let me talk you through them

First off, these 'DoS Attack' entries are not actually DoS Attacks. They aren't even attacks of any nature. This is background traffic setting off these types of log entries, and it's a very common occurrence in any router; DoS Attacks are extremely, extremely rare and highly targeted; plus, if you were actually DoS attacked, your entire home Internet would drop out for hours.

Secondly, the Geo-Filter doesn't block groups of players / individual players from joining a server. This isn't the objective of that feature. You're trying to get the best host / server possible - if you were able to block players individually from joining your server, that'd be cheating!

I hope this helps

[MomoMedic]

52 minutes ago, Netduma Jack said:

Hi, welcome to the forum!

Thanks a lot it's really friendly around here

52 minutes ago, Netduma Jack said:

if you were actually DoS attacked, your entire home Internet would drop out for hours.

That's what happened the first time to my firends and i thought that the XR500 somewhat protected me. Yesterday again we faced almost all players that seemed laggy and we went suspicious after we faced a team three times and even if we won each single time randomly one of my team me included felt huge lagg spike and started to lose gunfight only for that reason and after that by chance i went looking the logs and the games were exactly in the same timeframe of the "dos attack" reported.  Should i reboot the modem when we encounter those laggs or anything else?

52 minutes ago, Netduma Jack said:

Secondly, the Geo-Filter doesn't block groups of players / individual players from joining a server. This isn't the objective of that feature. You're trying to get the best host / server possible - if you were able to block players individually from joining your server, that'd be cheating!

I miswrote what i meant: shouldn't the modem lock me and my team in the european server and if so if someone from Chile wants to play with me has to connect to my server while having huge ping/lagg issues? From the experience of yesterday seemed the other way around even though we don't know how laggy we felt to those players. For now we found that after finding the server in germany, including it inside the geofilter and enabling the strict mode most of the game went flawlessly regarding lagg and ping but then sometime we're matched with team from around the world or even european teams that we find way laggy and that's what we want to avoid. Is there something i'm still missing?

[Netduma Jack]

There's nothing you're missing - it's all about what you can control, and what you can't. You cannot prevent other players from joining a server - it's just not possible. No router will ever offer that service, since it completely breaks the game. The results you're getting are as good as you can get by the sounds of it; you're getting a higher quantity of good quality games on nearby servers, and when you get them it's a great experience. Not every game will be great since sometimes there'll be some high ping players or cheaters dragging it down, but at least you're able to secure the best server possible for the lowest ping possible.

I wouldn't reboot the router mid-game or during matchmaking ever. Those DoS attack logs will likely show up whenever you're playing the game, it doesn't mean you're being attacked in the slightest. DoS attacks are so rare that I'd be surprised if any of our current users (bar famous YouTubers) have ever truly experienced one. It's largely just a myth, since it requires the attacker to have your IP address (which is incredibly difficult to attain, especially just through playing a game with another player).

[wawapretzels]

I think it is becoming more common to be DoS'd then you are making it sound, which is frustrating when we have no way to truly tell from our logs or router because the programmers made DoS Attack show up 100 times a day in the log. I get why most "DoS" claims on here are dismissed, but it seems to be pretty relevant as of late. It is possible to obtain an IP address of another user on console using Cain and Abel in an online game lobby or am I wrong? Although still difficult, it seems they can pull the IPs of everyone in the lobby, or of a single person if they join the same Xbox party or receive a message.

After lagging out of a ranked game after finishing a round in 1st, then a single IP address shows up multiple times a second in the log as a DoS attack and does not stop, coupled with the entire household internet connection going down for an hour, would that then be considered a true DoS? Why else would all of that occur in one night when in close to a year of owning the router, nothing even close to that has happened?

The question that has been spurring me: why are we not able to ban an IP address from communicating with our router? Is there not a way to stop my router from receiving packets from the above IP address?

[Netduma Fraser]

Yes they are probably still able to do that. Yes I would consider that a proper attack if your internet connection is completely down.

Even if you could do so I doubt that would help much. By the time you knew the IP to ban the attack will have already taken place. They also likely change their IP frequently so you wouldn't prevent an attack in future. Best way to defend against DDoS is using a VPN.

[oRaGaMi]

How realistic is competitive gaming on a VPN? Especially after purchasing this expensive hardware for decreasing latency in matches? VPN adds hops increasing latency. Honest question here.  

[Netduma Fraser]

1 hour ago, oRaGaMi said:

How realistic is competitive gaming on a VPN? Especially after purchasing this expensive hardware for decreasing latency in matches? VPN adds hops increasing latency. Honest question here.  

Hey, welcome to the forum!

It depends. On the one hand it increases latency like you say and really you want the best ping possible when playing competitively. You're also at the mercy of the VPN provider, if they get an outage or an issue with the server you're connected to you could drop the connection. On the other hand it would protect your IP address against any would be cheaters trying to DDoS you. If you decide to use a VPN for competitive gaming I would advise getting a VPN that specialises in gaming and also select the closest possible server to you to minimise latency.