Originally Posted by till
I think there is not much that you can do if there is an incoming attack. Only your provider can try to block the traffic at the routers in front of your server.
I know and they won't
I am talking about strato, they even told me that they usually ask people to sign a statement that one won't do it again (Unterlassungserklärung) or even cancel their contract, so soon, if I don't start logging so I can file an abuse report to those f***ing idiots attacking my server I will have top look for a new server provider.
so if someone could suggest some logging rules or at least give me some hints as to where and what to log...