LiteSpeed Support Forums

LiteSpeed Support Forums (http://www.litespeedtech.com/support/forum/index.php)
-   Proxy Service (http://www.litespeedtech.com/support/forum/forumdisplay.php?f=42)
-   -   Ping ok 503 error (http://www.litespeedtech.com/support/forum/showthread.php?t=6223)

adnet 09-11-2012 08:10 AM

Ping ok 503 error
 
Is this from the attack or it is something wrong not working?
Ping to the domain was perfect.

I am under attack syn flood attack

Blocked: Temporary Block

Sample of block hits:
Sep 11 18:09:51 sexy kernel: Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:25:90:4e:30:3e:10:8c:cf:1d:ed:c1:08:00 SRC=49.244.113.248 DST=199.189.111.196 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=1416 DF PROTO=TCP SPT=10191 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 11 18:09:51 sexy kernel: Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:25:90:4e:30:3e:40:55:39:06:f3:41:08:00 SRC=49.244.113.248 DST=199.189.111.196 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=1420 DF PROTO=TCP SPT=10226 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0

webizen 09-11-2012 10:22 AM

Quote:

Originally Posted by adnet (Post 34988)
Is this from the attack or it is something wrong not working?
Ping to the domain was perfect.

I am under attack syn flood attack

Blocked: Temporary Block

Sample of block hits:
Sep 11 18:09:51 sexy kernel: Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:25:90:4e:30:3e:10:8c:cf:1d:ed:c1:08:00 SRC=49.244.113.248 DST=199.189.111.196 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=1416 DF PROTO=TCP SPT=10191 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 11 18:09:51 sexy kernel: Firewall: *SYNFLOOD Blocked* IN=eth0 OUT= MAC=00:25:90:4e:30:3e:40:55:39:06:f3:41:08:00 SRC=49.244.113.248 DST=199.189.111.196 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=1420 DF PROTO=TCP SPT=10226 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0

This is from your firewall (iptables) when its "SYNFLOOD" rule is triggered and logged.

adnet 09-11-2012 10:34 AM

i know my friend has nothing to do but it was related
what about these ?
Ping ok 503 error
Is this from the attack or it is something wrong not working?
Ping to the domain was perfect.
why i was getting 503 error ?

webizen 09-11-2012 10:56 AM

what's the domain in question? that src ip is not our proxy.

adnet 09-11-2012 11:15 AM

YOUR PROXY WAS 68.68.26.33
and my domain
www.example.com

webizen 09-11-2012 12:53 PM

Quote:

Originally Posted by adnet (Post 35002)
YOUR PROXY WAS 68.68.26.33
and my domain
www.example.com

Seems your backend server blocks proxy.

adnet 09-11-2012 01:01 PM

any instructions what to do in this case ?

webizen 09-11-2012 02:44 PM

you need to open firewall (iptables) to allow proxy access to your backend server.

adnet 09-12-2012 12:50 AM

I did but it was still 503,the first thing that i did.

webizen 09-12-2012 02:43 PM

looks ok now.


All times are GMT -7. The time now is 11:36 AM.