• Resources
  • Free Flarum hosting on an expert platform by FreeFlarum.com

meetdilip [deleted] PaolaDziwetzki

Yesterday FreeFlarum suffered another DDoS attack. Over 2 milion requests within a few minutes from 5K+ IPs. I implemented an emergency filter that would blacklist aggressive sources, but it may have been too strict and ended up blocking regular visitors.

My apologies for that. All blocks have been lifted. Also, I have adjusted the DDoS filters so next time they will be more accurate.

PS I am absolutely baffled as to why someone would want to damage FreeFlarum. Probably a bored teenager ☹️

    Sanguine PS I am absolutely baffled as to why someone would want to damage FreeFlarum. Probably a bored teenager

    Also a drawback of running so many forums from one ip 😇

      luceos What do you mean? It would be unfeasible to offer free forums with their own IP...

        Sanguine

        It is possible that of those many admins, someone has serious enemies. It could be that one person who is causing all this. That is the best guess I could make about an otherwise useful service.

        We are all with you. It is ok to have some downtime. We know you are giving your best. Don't lose heart.

          Sanguine I know. But as meetdilip points out. Only one forum needs an enemy to do a ddos on the forum ip for all forums to be impacted.

            • [deleted]

            luceos true, but not necessarily the case. It's possible that the IP address itself is a target from a range or subnet, or has even been hit by mistake. Nonetheless, a DDoS of that magnitude can be bought in the dark web for less than your weekly coffee cost. Remember that a DDoS is virtually all cases it not from one lone IP. It's an army of unknowing and unwilling zombies that have been created by previous compromise and are under influence of a C&C (command and control).

            All the originators of the attack do is provide a list of targets, them flip a switch to start it. What's more likely is that the IP you are using has been previously attributed to an institution that had been a target before, and they've changed their IP range in order to curb the attacks. You've landed up with that IP and now are using the price.

            Check DNS blacklists first and see if you're IP is listed. Failing that, it's a dark web search to see how you've been targeted, or change your IP which is always going to be quicker and cleaner.

              [deleted] Well, it's definitely a L7 attack against a specific forum. I could kill the specific forum, but it does not seem malicious and I don't want to succumb to bored teenagers or otherwise low moral individuals.

              Edit: I have per-forum rate limiting (via Nginx) in place, but this particular attack was so voluminous that even Nginx choked on it.

                • [deleted]

                Sanguine I shield attacks like this using imunify-360. Because of the nature of my site and what I do, I'm frequently exposed to DDoS. The largest one so far is around 1Tb - and it was stopped by imunify360 without even hitting the NGINX gateway

                Hello, I just started a new free forum - I picked Flarum because of its design plus getting away from the apples and googles of this world appealed to me. I do have some questions :

                • I see a user list in settings, but i cannot find it anywhere. Is this an extension i need to download?
                • Can i install a theme?
                • A login (with emailadress) with nickname from 5 letters didn't work, it did function with 12 letters - is this an incident or something else?
                • Can i place subdiscussions? Like a directory structure?
                  -

                  Luutz I see a user list in settings, but i cannot find it anywhere. Is this an extension i need to download?

                  User directory by FriendsOfFlarum

                  Luutz Can i install a theme?

                  Extensions > Themes
                  Resources > Styles

                  Luutz A login (with emailadress) with nickname from 5 letters didn't work, it did function with 12 letters - is this an incident or something else?

                  Your own username has 5 letters.

                  Luutz Can i place subdiscussions? Like a directory structure?

                  You can use two levels of tags to organise your discussions, e.g. Extensions > Themes or Resources > Styles in this forum here (see above).

                  Sanguine What is the old way? Is this FF related?

                  A css badge below the avatar. Which modifies itself to a higher rank description as our post count increases.

                  Tnx Pollux. That helped a lot. I can only use the themes that are made ready on the built in freeflarum extensions, right?
                  So only Light Shadow?
                  I have the Light Shadow theme, but I do not see tags (in left menubar ) nor do i understand how to make a tag.... IS that coming up after 6 or so discussions or how does that work?

                  The nickname issue seems solved, it was on an android phone - perhaps that was the problem..

                    Luutz I can only use the themes that are made ready on the built in freeflarum extensions, right?

                    No, you can write your own theme extension. Or, much simpler to beginn with and the only way with FreeFlarum, tinker with some CSS rules in your browser (e.g. 'inspect element' in Firefox when you right click any part of a website) and once you have found a new rule you like you can copy the CSS rule into the 'custom CSS' box under the 'appearance' section of your admin panel.

                    One example: Let's assume, you want to change the background color of quotes in a discussion. In the browser right click on any quote and choose 'inspect element'. You should find yourself in the middle of the <blockquote> element:

                    <blockquote class="uncited">
                        <div>
                            <p>
                                <a href="https://discuss.flarum.org/d/7585/1337" class="PostMention" data-id="131304">Sanguine</a>
                                What is the old way? Is this FF related?
                            </p>
                        </div>
                    </blockquote>

                    The <p> element will likely be collapsed and look like <p>...</p>, you can open it if you are interestet in the innards.

                    Now you have to search for the background color, it could be applied to the <blockquote> element, the <div> inside or the <p> element. It turns out to be in the <blockquote> element:

                    .Post-body blockquote {
                        font-size: inherit;
                        border: 0;
                            border-top-color: currentcolor;
                            border-top-style: none;
                            border-top-width: 0px;
                            border-bottom-color: currentcolor;
                            border-bottom-style: none;
                            border-bottom-width: 0px;
                        background: #e7edf3;
                        color: #667d99;
                        border-radius: 4px;
                        padding: 8px 15px;
                        border-top: 2px dotted #fff;
                        border-bottom: 2px dotted #fff;
                        margin: 1em 0;
                            margin-top: 1em;
                    }

                    Change the value of background as you like, eg. a little bit darker: #d7dde3.

                    Now copy the CSS block and remove anything you don't need, that's what you put into your 'custom CSS' box:

                    .Post-body blockquote {
                        background: #d7dde3;
                    }

                    Et voilá, you first customization of your Flarum instance.

                    Haha well I am more someone who looks for the ready set themes - but i'll give it a shot if i find the time.

                    What about the tags, I cannot find how that works anywhere, plus it is not in the left menu. Is there somewhere a description?

                      Luutz I am more someone who looks for the ready set themes

                      Then you miss most of the fun...

                      What about the tags, I cannot find how that works anywhere, plus it is not in the left menu.

                      You mean the sections in the admin panel? Well, there is one section named 'Tags', don't you have that?

                      Exactly, i do not have any mentioning of tags in the settings...i did install Dutch language, might be it, but uninstalling doesn’t help either... So I really don't know what's wrong.

                      Administration menu has - Dashboard, basics, email, permissions,apeearance,extensions, links - and that's it. No tags mentioned.

                      I do like Flarum, but it would be nice if there was a little bit more support - a how to section or docs, so that I am not waiting on the grace of who has time to answer the question.... As it is now it would be not wise for me to go ahead with this forum... It seems only fit for programmers, and less for users... This is not negative criticism but more a cry for help :-)