[Habbo] Preventing DDoS attacks!

[wite]

Hey,

Well a lot of people complain about how their hotel always gets DDoSed, even though they have cloudflare.
This is a simple, cheap tutorial on how to prevent this as much as possible.

1.
Visit CloudFlare

You must be registered for see links

and register a free account, which is pretty simple.
Then add your domain to your cloudflare account,

Obviously once you have typed your domain, click "Add Website".
This will stop people from being able to use "CMD" to find your IP.

You may now be thinking "But our IP in our client.php can still be DDoSed!" ?

2.
Go to

You must be registered for see links

or click

You must be registered for see links

.
Click the simple "Place new order" button, shown below;

Now it will bring up an order screen, just simple click "Order Now!"

This will bring you to a page that looks like this;

Just simply add your IP address and TCP port in the boxes shown.

Then click "Continue".

NOTE: Yes, this will cost you $10 per month. But you won't get any secure protection 100% free.

3.
You will now recieve a screen that will look like this:

Simply fill in all the required boxes, then continue to the payment method of choice.

Click "Checkout" then you will pay for your new service. It's pretty simple and I recommend using PayPal.

4.
Now its time to use this new service.
You shall recieve an email, or in another way recieve a url that will look a little like this "proxy1pl.ddosproxy.info".
(URL's will vary).

Copy this URL, then go to your VPS/Host and find the page "Client.php".
Open client.php, and find > "connection.info.host" : "YOURIPHERE", <
Replace "YOURIPHERE" with the new URL you were given, example:

"connection.info.host" : "proxy1pl.ddosproxy.info"

Please Note: Only the URL you have been given will work.
Now save the file "client.php", then load your client. Your client will no longer show your IP, and you should be safe from DDoS attacks.

Hope this worked for all you Habbotards,
Any further questions? PM me.

Thanks,
Supa.

EDIT: This is for RevCMS, but can easily be used on UberCMS or HaddoCMS by finding where your IP is located in the client.

 

[DaLightz]

Niice.

 

[wite]

Niice.

Thanks, I put some effort into this.

Some hotel's using this strategy:

You must be registered for see links

You must be registered for see links

Enjoy

 

[Quackster]

Very nice Vincent.

Although I don't have $10 to spare

 

[Dan Smith]

I done this, and disabled enable_ddos, but still created a file commonly, named ddos.txt, and bans the proxy, meaning people are stopped from accesing the hotel

 

[wite]

I done this, and disabled enable_ddos, but still created a file commonly, named ddos.txt, and bans the proxy, meaning people are stopped from accesing the hotel

Are you sure you followed the whole tut properly and put the link in the right place?
If it is doing what you said, then you have done something wrong.

I know this works as there are several hotels using it.
Maybe try the tut again and read through the tut slowly.

 

[Ghost]

Well Done Supa.

 

[wite]

Well Done Supa.

Thanks mayn

 

[Ghost]

Thanks mayn

No Problem.

 

[Brought]

Great tutorial, thanks!

 

[wite]

Great tutorial, thanks!

Thanks, Happy you like it!

 

[CosmoTrigger]

This is great, thanks alot!

 

[Logic]

Just curious, is there any proof of this working? Like, if they happen to get your Hotel's IP, will it actually mitigate the DoS/DDoS or is this just to hide your IP from the client?

 

[wite]

Just curious, is there any proof of this working? Like, if they happen to get your Hotel's IP, will it actually mitigate the DoS/DDoS or is this just to hide your IP from the client?

It hides the IP, and Cloudflare hides the IP from booters, so the IP is pretty well hidden. But if someone, somehow got the IP, I am not 100% sure if a proxy would mitigate the actual DDoS, hence why this is called "Preventing DDoS attacks" and not called "Completely securing your hotel from DDoS".

EDIT:

You must be registered for see links

uses this, and it works for them.

 

[Logic]

It hides the IP, and Cloudflare hides the IP from booters, so the IP is pretty well hidden. But if someone, somehow got the IP, I am not 100% sure if a proxy would mitigate the actual DDoS, hence why this is called "Preventing DDoS attacks" and not called "Completely securing your hotel from DDoS".

EDIT:

You must be registered for see links

uses this, and it works for them.

Is this your site, or just one you know of (referring to the proxy site)?

 

[wite]

Is this your site, or just one you know of (referring to the proxy site)?

Just one I know of tbh, I am not getting anything out of this.
I have seen hotels using this so I just thought I would inform the people of DevBest on how to do it.

 

[ButtLord420]

Nice, I think another way is encoding your ip into the swfs if you can't afford this.

 

[Logic]

Nice, I think another way is encoding your ip into the swfs if you can't afford this.

That works until someone gets a hold of your SWF and decompiles it. Also, this works by hiding your ip in your client.php when someone view-source's your client.

 

[CosmoTrigger]

zap hotel also uses this, and you can just hide your ip in the swfs if you are patient enough.

 

[Keyla]

Cloudflare is shit. Ever heard about 'Cloudflare Resolver's?