DDoS Prevention Guide

A DDoS is an overflow of information packets sent to an IP address (usually by malicious PC ninjas). Most common connections won't be able to handle all of the packets, and will then be effectively blocked from maintaining a connection until the attack lets up.

Chances are, if you are getting intermittent lag or get disconnected from a match randomly and then able to reconnect, you are most likely not being DDoS'd. DDoS attacks tend to start slow with minor latency issues and then gradually get worse to a point where you are unable to access any outside resources, not just League of Legends. For example, you will begin to disconnect and reconnect to Skype until eventually you will be unable to connect at all.

If you experience consistent but intermittent connection issues, please check out this article instead.

A DDoS can only work if the attacker has an IP address to target, so your primary goal is to protect your IP address. IP addresses are naturally hard to obtain, but some programs, such as Skype (which we will be using as an example), allow your IP address to be found by contacts. This amounts to virtually every compromised IP address in the LoL community. As it may take some time to change your IP address, it is recommended that you take steps to protect yourself well in advance of your matches.


Basic DDoS Protection (using Skype)

Appendix

Additional Guides and Links


Basic DDoS Protection

Step 1: Update Skype

Update your copy of Skype by either selecting "Check for Updates" from the Help drop-down menu or visiting www.skype.com/en/download-skype/skype-for-computer/. Then, open the options menu (Tools > Options) and make sure the "Allow direct connections to your contacts only" is checked (found under Advanced > Connection). This protects your IP from people not on your contact list. However, your IP remains exposed to your contact list.

Please also keep in mind that the best protection against revealing your IP address to potentially malicious parties on Skype is to add only people you know and trust!


Step 2: Proxy Skype Connection

Proxying your Skype is a fairly simple process, and is covered in this article:

https://support.skype.com/en/faq/FA1017/can-i-connect-to-skype-through-a-proxy-server

There are many sources of free proxy servers available online. A few are referenced below and have options for many different countries. Find a server listed near you and test it out, and ensure that your Skype is functioning properly. This will mean the IP address shown to your Skype contacts is not your actual IP address. You must proxy Skype on every single device you use, including mobile phones or tablets.

http://www.proxynova.com/proxy-server-list/
http://www.hidemyass.com/proxy-list/search-226604


Step 3: Changing your IP address

Even if you’re proxying Skype, you are still at risk for an attack if someone has already acquired your IP address. The majority of ISPs will change your IP address at your request. Find a customer service or technical support contact at your ISP and ask for a new IP address. If for some reason they will not help you change your IP address, you can attempt to force an IP change by unplugging every PC, router, modem, or other network hardware and computer from the internet for a period of 24 hours. Confirm that the reset worked by visiting www.whatismyip.com before and after the reset.

Keep in mind that protecting your connection is the player’s responsibility, and that there is virtually no way to thwart a DDoS attack quickly enough to return to a match in progress. This guide is not meant to be a complete protection package, and Riot is not responsible for ineffective or incomplete protection.


Appendix

League of Legends Netlogs

To help diagnose a connection problem while playing LoL, you will likely be asked for your Network Logs (NetLogs). To find them, navigate to the client’s folder and go to Logs > Network Logs and locate files from the dates in which you suffered network issues. For example, my TRNA client is located in C:\Riot Games\NATR1, and I was lagging all day on 1/22/14. I would navigate to C:\Riot Games\NATR1\Logs\Network Logs, sort the files by “Date Modified,” and locate all files dated 1/22/14.


Wireshark

Wireshark is a network protocol analyzer, which is a fancy way of saying that it breaks down everything coming and going through your internet connection. By running Wireshark during your games, it can provide your ISP or Riot support with in-depth information about what’s happening to your network. While not required, if you are technically inclined, running Wireshark is an excellent tool to help determine the cause of network problems.

You can download Wireshark and learn more by visiting their website:

http://www.wireshark.org/download.html


Additional Guides and Links

Please note: The resources included in this guide are not monitored or owned by Riot Games, so use them at your own risk!

Skype Update Download: www.skype.com/en/download-skype/skype-for-computer/

Skype Proxying Guide: https://support.skype.com/en/faq/FA1017/can-i-connect-to-skype-through-a-proxy-server

Proxynova – Free Proxy Site: http://www.proxynova.com/proxy-server-list/

hidemyass – Free Proxy Site: http://www.hidemyass.com/proxy-list/search-226604

IP Address checker: www.whatismyip.com

Download Wireshark: http://www.wireshark.org/download.html

Destiny’s DDoS Protection Guide: http://blog.destiny.gg/protection-from-ddos-attacks/2/

Gamebox’s DDoS Prevention Guide (Leaguepedia): http://lol.gamepedia.com/DDoS_Prevention_Guide

ULTIMATE TL;DR GUIDE

1) If you use Skype, update it and limit direct connections to your contact list as shown above.

2) If you add random people on Skype, you have 3 options to avoid a potential DDoS attack:

  • Only add contacts that you know and trust in real life.
  • Use a Skype proxy as shown above.
  • Do not use Skype.