Dddos protection

[HFKoKoOo]

Hello someone ddosing my friend from 1 month, he has tried everything to protect himself but no solution. Can you tell me the best way for ddos protection on windows

[brighteyes890]

Change your IP

[HFKoKoOo]

Just now, brighteyes890 said:

Change your IP

He has static ip and can't change it, also he is hosting cs go servers.

[brighteyes890]

Just now, HFKoKoOo said:

He has static ip and can't change it, also he is hosting cs go servers.

Has he looked for third party solutions?

[cynexit]

If he is tech-savvy: Rent the cheapest VPS from OVH you can get, setup OpenVPN and tunnel the complete traffic trough the VPS. OVH has amazing hardware DDoS protection included in almost everything, this would be a very solid solution.

[RZeroX]

Contact your ISP and get assigned a new IP?

[firestronk]

5 minutes ago, RZeroX said:

Contact your ISP and get assigned a new IP?

 

48 minutes ago, HFKoKoOo said:

He has static ip and can't change it, also he is hosting cs go servers.

 

[rEaGeNeReary]

Whitelist IP that want to play cs go. deny everything else.

[cynexit]

5 minutes ago, rEaGeNeReary said:

Whitelist IP that want to play cs go. deny everything else.

This won't help. If you start to filter at your router the packets are already saturating the cable from your ISP to your router, your ISP would need to do the filtering but they won't do shit unless you pay them.

[rEaGeNeReary]

Just now, cynexit said:

This won't help. If you start to filter at your router the packets are already saturating the cable from your ISP to your router, your ISP would need to do the filtering but they won't do shit unless you pay them.

I'm betting they won't even saturate OP's downstream bandwidth since friend has static ip so maybe high bandwidth too. If the attacker is saturating bandwidth given by ISP nothing will stop it, unless isp intervened.

[KuJoe]

Unless he can change his IP he's screwed. There is no possible way to block a DDOS attack at his modem unless he has multiple 10Gbps uplinks to his ISP which I doubt he does. He should switch ISPs to get a new IP or cancel his current ISP for a week or two then order it again and hope his old IP was assigned to somebody else already. There is no way to filter a DDOS attack using software and even with a hardware firewall if the uplink is saturated it won't matter.