Status
Not open for further replies.
Technically there is absolutely nothing you as the end-user can do to prevent it. You can install the worlds most advanced firewall known to man. If you are on a capped account, by the time those packets reach your firewall and/or router/modem it already consumed the bandwidth. I've asked around and WA (also utilising IS bandwidth) refund their users. So I guess CW needs to explain what the procedure will be going into the future. This issue is something that IS needs to handle and should be reimbursing CW in turn. That's what I'm led to believe after speaking to a number of knowledgable folks.

We don't buy GBs or accounts from IS like some ISPs do. We physically purchase our own capacity, so there are no GBs per se to reimburse, however we have identified a few accounts which were affected, including yours, and we will by our own accord reset your usage over the next 24 hours automatically without you needing to do anything on your end, irrespective of what IS say or do. This is our capacity, and our network, and our responsibility, and resetting usage back to nil or giving you back the full allocation or more is the right thing to do for the few customers affected.

This will happen automatically for those customers who we have identified and confirmed as having been subjected to any DDOS behaviour, and anyone who has topped up as a result of this (there are only a handful of customers who we have confirmed are actual DDOS attacks and even fewer who have needed to top up where I didn't already intervene and provide free GBs) will be credited the amount towards their next invoice.

EDIT: I can also confirm that your source is mistaken about how IS operate with per GB and per account resellers on this matter. Not sure where your info came from but it's not correct, however we will by our own accord sort this out for affected customers...
 
Last edited:
It looks like my account has also been hit 50GB per day for the last 2 days, I doubt it was steam updates or such that my sons were doing. Luckily I'm on uncapped, but still, my modem feels violated!
 
EDIT: I can also confirm that your source is mistaken about how IS operate with per GB and per account resellers on this matter. Not sure where your info came from but it's not correct, however we will by our own accord sort this out for affected customers...

Was referring to WA, based on my understanding they buy GBs/accounts from IS, in which case IS refunds or something along those lines. At least that's how I understood it to be.

DJ just on a related note. Even though you buy capacity from IS, surely the mitigation is not just on your end. IS must surely have a responsibility towards you guys too?
 
Was referring to WA, based on my understanding they buy GBs/accounts from IS, in which case IS refunds or something along those lines. At least that's how I understood it to be.

I can categorically state that this is not the case for us, and while I cannot speak for other ISPs, I have it on some very good authority that the information that was relayed to you was incorrect, as per my previous post...

DJ just on a related note. Even though you buy capacity from IS, surely the mitigation is not just on your end. IS must surely have a responsibility towards you guys too?

We unfortunately cannot divulge nor publicly discuss the sort of commercial depth required to answer this question, however nothing that was previously posted should be read to preclude any responsibility from IS to assist to mitigate a DDOS attack, or anything else which they do splendidly day in and day out without anyone really noticing. The point of my previous post was that it is not up to IS to dictate what we do, and we therefore take responsibility for our relationship with you as the end user, and in this case make our own decisions, irrespective of the fact that there is pretty much zero chance of any sort of rebate, refund, or discount to us in light of a DDOS attack. The nature of such an attack makes it very difficult for someone to accept responsibility for the malicious actions of others. In this case however, and an isolated one, we will reimburse the GBs and more that were used. We were carrying spare capacity in any case for something we'd planned later this month and have put that on the back-burner for the time being to be sure that our decision to reimburse GBs doesn't negatively impact the network in any way...
 
For what it worth. I managed to figure out a fairly simple way to save myself from DDoS attacks. If anyone out there use a Mikrotik I'd be happy to help.

In short what it does on the drop-all rule, it monitors the rate of packets, if that exceeds a specified rate, it then adds the source IP to a DDoS list with a timeout of 10min, then another part monitors this list and if its populated it will disable the PPPoE connection. Every minute it monitors the address list and once it has cleared (10min) it will re-enable the connection. In my flood ping test on myself this seems to work rather well.

Other than the above, there's not much I can think of that would save your GBs from vanishing.
 
My mikrotik just got lightninged :(
Where can I get a new one?
 
Im having weird usage on my 20mbps 225gb capped account... Data is being used even when no one is connected to my network
 
Internet went all wonky last night. Discovered this evening that I am also capped. Fantastic DDoSed as well as per support!

200GB what a waste :-(
 
Internet went all wonky last night. Discovered this evening that I am also capped. Fantastic DDoSed as well as per support!

200GB what a waste :-(
Hey Lino. See my latest post on this. I can confirm yours already as it's in our list we proactively picked up, and the guys should reallocate more than your full cap shortly...
 
Hey Lino. See my latest post on this. I can confirm yours already as it's in our list we proactively picked up, and the guys should reallocate more than your full cap shortly...

You guys are truly an amazing ISP and people! DJ I am on a mission to convert friends and family over to you guys!

A FKING MASSIVE THANK YOU!
 
This is why I love this ISP.

They have people actively investigating problems like these and taking care of their clients.

Top class.
 
Last edited:
You know things are awesome when you never have to post in a feedback thread.

You know things are super awesome when you see this level of support going on when you occasionally peek in.

Every other ISP in this country would have told their clients tough luck, update your antivirus and that's that.

Kudos to DJ and team, keep on keeping on. :D
 
You know things are awesome when you never have to post in a feedback thread.

You know things are super awesome when you see this level of support going on when you occasionally peek in.

Every other ISP in this country would have told their clients tough luck, update your antivirus and that's that.

Kudos to DJ and team, keep on keeping on. :D

Definitely, that's why I'd punt their brand any day, miles ahead of OpenWeb, WebAfrica and co. Please, please keep it that way :P
 
I wonder if they are attacking random IP's cause it's nearly impossible to specifically target someone unless they have static IP's.
Seems to be targeted at users of certain dynamic dns services from what I have heard.
 
Status
Not open for further replies.
Top
Sign up to the MyBroadband newsletter
X