Hey guys. You might notice higher stales or some dropouts. This is due to several DDOS attempts which were blocked sucessfully some legitimate IP addresses may have been blocked due to the attackers spoofing IP addresses. Things seem to be setteling down now and connections and stales returning to normal.
Looks like our hard work is paying off. We are surley getting there.
Thanks for your support.
Topic: [ANN][LTC][Pool][PPLNS] [ Stratum ] give-me-ltc.com 1% FEE [10 block confirms!] - page 4. (Read 29991 times)
May 11, 2013, 07:25:51 PM
May 11, 2013, 03:47:51 PM
The net stats Difficulty Next calulator is way out, it read over 100 too high on the site compared to the actual LTC difficulty that occurred a couple of min ago.
This one was accurate:
https://www.litecoinpool.org/stats
This one was accurate:
https://www.litecoinpool.org/stats
Even that one isn't as accurate as allchains.info, which is pretty much the standard.
May 11, 2013, 04:08:50 AM
The net stats Difficulty Next calulator is way out, it read over 100 too high on the site compared to the actual LTC difficulty that occurred a couple of min ago.
This one was accurate:
https://www.litecoinpool.org/stats
This one was accurate:
https://www.litecoinpool.org/stats
Yes it is inaccurate at teh moment because its calculating difficulty based on hashrate not average time of blocks solved like the one on litecoinpool. All the rest of teh info is pulled directly from the litecoin daemon.
Its on my list of things to fix but there are more pressing matters to deal with at the moment.
May 11, 2013, 12:24:31 AM
The net stats Difficulty Next calulator is way out, it read over 100 too high on the site compared to the actual LTC difficulty that occurred a couple of min ago.
This one was accurate:
https://www.litecoinpool.org/stats
This one was accurate:
https://www.litecoinpool.org/stats
May 10, 2013, 09:13:26 PM
OK so I gave it another shot, first few workers connected fine, then as I tried to add a few more while doing some overclocking tweaks to them (starting and stopping the workers repeatedly), then they were unable to connect. So Im guessing you are only allowing a limited number of connection attempts from a single IP as a form of DDOS defense.
But its a double edged sword, because I need to connect over 12 workers from one IP and there are times I need to test OC stability and connect and reconnect. If there was some way to verify my IP as legitimate and allow it, say 50 connection attempts in a 24 hours period, that would be great because as the pool is right now, I cant use it for more than a few workers, and certainly not for stability testing.
But its a double edged sword, because I need to connect over 12 workers from one IP and there are times I need to test OC stability and connect and reconnect. If there was some way to verify my IP as legitimate and allow it, say 50 connection attempts in a 24 hours period, that would be great because as the pool is right now, I cant use it for more than a few workers, and certainly not for stability testing.
Agreed its very anoying that legit miners are being blocked out. We have made soem changes and more miners are able to connect. Rather then us chattign here is it possable for you to jump on IRC or add me on gmail and we can troubleshoot in realtime??
Im very sorry its takign solong for us to iron out all these issues. Hopefully we get them fixed soon.
May 10, 2013, 04:21:07 PM
OK so I gave it another shot, first few workers connected fine, then as I tried to add a few more while doing some overclocking tweaks to them (starting and stopping the workers repeatedly), then they were unable to connect. So Im guessing you are only allowing a limited number of connection attempts from a single IP as a form of DDOS defense.
But its a double edged sword, because I need to connect over 12 workers from one IP and there are times I need to test OC stability and connect and reconnect. If there was some way to verify my IP as legitimate and allow it, say 50 connection attempts in a 24 hours period, that would be great because as the pool is right now, I cant use it for more than a few workers, and certainly not for stability testing.
But its a double edged sword, because I need to connect over 12 workers from one IP and there are times I need to test OC stability and connect and reconnect. If there was some way to verify my IP as legitimate and allow it, say 50 connection attempts in a 24 hours period, that would be great because as the pool is right now, I cant use it for more than a few workers, and certainly not for stability testing.
May 09, 2013, 11:15:25 PM
Dont worry we are always tweaking. A lot less connection problems today still got more work to do but we will get there.
Its great that users are emailing us and letting us know all this it all helps.
Keep it up guys thanks heaps!!
Its great that users are emailing us and letting us know all this it all helps.
Keep it up guys thanks heaps!!
May 09, 2013, 10:48:06 PM
Ok, noob question, isn't there some way to only allow incoming connections from allowed IP, and block the rest ? The allowed IP would naturally be those of your minions.
I think that is the whole point of setting up workers.
May 09, 2013, 10:36:18 PM
Ok, noob question, isn't there some way to only allow incoming connections from allowed IP, and block the rest ? The allowed IP would naturally be those of your minions.
May 09, 2013, 06:09:59 PM
We mentioned "new layers". That implies more than one...
All you said is true. All sites can be put out, as long as you can generate enough traffic to fill their pipes. Doesn't matter how many protection systems they have!
We don't claim to be DDoS proof as other do. We just do our best to prevent new outages creating new "layers" of security.
Cheers!
All you said is true. All sites can be put out, as long as you can generate enough traffic to fill their pipes. Doesn't matter how many protection systems they have!
We don't claim to be DDoS proof as other do. We just do our best to prevent new outages creating new "layers" of security.
Cheers!
I am confused on how a firewall will help stop a ddos attack in any appreciable way unless the attacker is stupid and/or you have
a massive internet pipe going into the firewall.
First. An attacker will spoof the source IP. You cannot block based on that. Blocking based on dest is silly. That is your IP.
If you drop all packets to unused ports they will simply port scan the pub IP and choose open ports which you must have for miners
to connect.
If they can hit you hard enough to fill up the internet pipe connecting to your firewall the game is already over.
etc.. etc..
Maybe you bought a paid for firewall service and they gave you a web interface to make changes on? If so that is neat.
Sucker probably has a 10GE connection going into it just so it can survive a 1 gbit/sec DOS.
Thanks for any info.
a massive internet pipe going into the firewall.
First. An attacker will spoof the source IP. You cannot block based on that. Blocking based on dest is silly. That is your IP.
If you drop all packets to unused ports they will simply port scan the pub IP and choose open ports which you must have for miners
to connect.
If they can hit you hard enough to fill up the internet pipe connecting to your firewall the game is already over.
etc.. etc..
Maybe you bought a paid for firewall service and they gave you a web interface to make changes on? If so that is neat.
Sucker probably has a 10GE connection going into it just so it can survive a 1 gbit/sec DOS.
Thanks for any info.
May 09, 2013, 10:16:10 AM
I am confused on how a firewall will help stop a ddos attack in any appreciable way unless the attacker is stupid and/or you have
a massive internet pipe going into the firewall.
First. An attacker will spoof the source IP. You cannot block based on that. Blocking based on dest is silly. That is your IP.
If you drop all packets to unused ports they will simply port scan the pub IP and choose open ports which you must have for miners
to connect.
If they can hit you hard enough to fill up the internet pipe connecting to your firewall the game is already over.
etc.. etc..
Maybe you bought a paid for firewall service and they gave you a web interface to make changes on? If so that is neat.
Sucker probably has a 10GE connection going into it just so it can survive a 1 gbit/sec DOS.
Thanks for any info.
a massive internet pipe going into the firewall.
First. An attacker will spoof the source IP. You cannot block based on that. Blocking based on dest is silly. That is your IP.
If you drop all packets to unused ports they will simply port scan the pub IP and choose open ports which you must have for miners
to connect.
If they can hit you hard enough to fill up the internet pipe connecting to your firewall the game is already over.
etc.. etc..
Maybe you bought a paid for firewall service and they gave you a web interface to make changes on? If so that is neat.
Sucker probably has a 10GE connection going into it just so it can survive a 1 gbit/sec DOS.
Thanks for any info.
May 09, 2013, 02:56:04 AM
Our protection system detected a new DDoS attack during the last ours that was successfully blocked . During the attacks some valid connections have been blocked on ports being attacked, so we recommend all miners to keep trying different ports.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
All pools the pool you have are currently dead.. I had a different miner on each one to stop downtime as much as possible but they are all getting "cant find server"
The port change work around unfortunately didn't do anything :/
The port change work around unfortunately didn't do anything :/
I assume you are getting all these DDOS attacks because give-me-ltc.com is the largest LTC pool controling the highest abount of network hashrate?
If so looks like an attempt to lower the difficulty by taking hashrate offline? I have used you since finding you mid April and all was brillaint until 2nd May. Then it's been trouble ever since difficulty jumped to 492.
M
it could be. Its unknown but it seems to happen quiet a lot to mainly the top 5 pools. But others have had it also.
May 08, 2013, 04:09:13 PM
Our protection system detected a new DDoS attack during the last ours that was successfully blocked . During the attacks some valid connections have been blocked on ports being attacked, so we recommend all miners to keep trying different ports.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
All pools the pool you have are currently dead.. I had a different miner on each one to stop downtime as much as possible but they are all getting "cant find server"
The port change work around unfortunately didn't do anything :/
The port change work around unfortunately didn't do anything :/
I assume you are getting all these DDOS attacks because give-me-ltc.com is the largest LTC pool controling the highest abount of network hashrate?
If so looks like an attempt to lower the difficulty by taking hashrate offline? I have used you since finding you mid April and all was brillaint until 2nd May. Then it's been trouble ever since difficulty jumped to 492.
M
May 08, 2013, 02:50:08 PM
Our protection system detected a new DDoS attack during the last ours that was successfully blocked . During the attacks some valid connections have been blocked on ports being attacked, so we recommend all miners to keep trying different ports.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
We are working hard to solve this problem, and keep attackers out of the pool servers, and miners in. As soon as attack stops all miners will be able to connect without further problems.
All pools the pool you have are currently dead.. I had a different miner on each one to stop downtime as much as possible but they are all getting "cant find server"
The port change work around unfortunately didn't do anything :/
The port change work around unfortunately didn't do anything :/
May 08, 2013, 11:46:33 AM
All pools the pool you have are currently dead.. I had a different miner on each one to stop downtime as much as possible but they are all getting "cant find server"
The port change work around unfortunately didn't do anything :/
The port change work around unfortunately didn't do anything :/
May 08, 2013, 11:18:08 AM
Some users have reported problems connecting to pool GetWork servers on port 80 (or port 8080). If you are in that situation, just change to port 443 (or 9332).
We are currently fixing the problem affecting that ports.
We are currently fixing the problem affecting that ports.
May 08, 2013, 03:59:58 AM
All good now, thanks. Will email for future reference.
cheers for the notice tho
. I guess it was a good test for the firewall :\ luckly it wasn't down for to long May 08, 2013, 03:51:13 AM
All good now, thanks. Will email for future reference.
May 08, 2013, 03:47:11 AM
Ok well we know the firewall works :\ was blocking monitoring so our host was rebooting server. Should be ok now if not please email!!!!
May 08, 2013, 03:31:49 AM
Down again :\ le sigh
I'll have a look thanks for letting me know but as I always say emailing me is faster
Yeah also down for me :/
Jump to: