Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Sync Flood Attack Help


WS Evolution

Recommended Posts

Posted

I have the following problem with a OSC site that I run:

 

Orders are being lost due to customers loosing access to the site. On further investigation the Hosting Company was having problems with a Sync Flood Attack. It was stated that our web site was the only one on the shared server that was under attack, so I wondered if there was a security issue with my OSC site. Customers were emailing, saying that they could no longer access the site. It turned out their IP was blocked by the servers firewall because they where supposedly attacking the site!! The hosting provider would not release their IP or willing to change the server rules.

 

Orders numbers have been dropping fast.

 

The problem occurred shortly after switching to SSL on a new IP address and maybe on a new server. At the same time I also installed the Thumbnail creator only the fly contribution. Configuration changes where made so that SSL was used on the site. I have no idea it this has anything to do with the problem or a security risk.

 

Does anyone have any advice, experience with such a problem? Are there any steps I can take to stop these attacks and my customer IPs from being wrongly blocked?

 

Any help welcome.

 

Thanks,

 

Gareth

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...