Is this the best method?

I'm working on the server for a game. Some users have previously barraged me with DOS attacks which have slowed it down and crashed it several times.

They mainly sent the attacks to my account sign up and login logic for my server, which makes everything else mess up, as I said.

My question is if I make a datatype specifically used to store and time the requests sent to these (and possibly other) logic gateways will that be enough to supress the attacks?

VB Code:

Private Type AntiDoS
    HD As Long
    lastTICK As Long
End Type
Dim AntiDoSsignup() As AntiDoS
Dim AntiDoSLogin() As AntiDoS

the HD is the harddrive hash obtained from the client.

I was thinking that each time they try signing up, the AntiDoSsignup array would get larger and store that information.

the last tick will be the time from GetTickCount. my logic would be:

if they send an attempt more than 3 times within ~1-2 seconds, they will be blocked.

Is there anything I am overlooking? I was thinking perhaps of analyzing the packets sent from the client to further determine if they were malicious or not.

Thanks.

Welcome to the forums.

Are you looking for a way to combat the sheer number or the malicious nature of these DOS hits?

Is this a web-based signup procedure?

this is software based.. and I would just like to know if that method I explained above would help prevent the automated data sent to those sections messing up or slowing down my code.

Quote:

---

Originally Posted by Hack

Welcome to the forums.

Are you looking for a way to combat the sheer number or the malicious nature of these DOS hits?

---

I was hoping I could do both.. but if not then the sheer number.

so no one knows how to do it?

i knew no one could... that is why i posted this.

nope.. after more than a week,, no one could come up with the best method, or even clarify my notions. :wave: