0

Like the service is there but it's just filterd enabled for lan access only .. what will happen ? enter image description here

closed as off-topic by Conor Mancone, schroeder Aug 20 at 17:56

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Conor Mancone, schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

1

Yes, it's possible to DDoS even if no ports are open.

Keep in mind that a DDoS attack works by exhausting a resource. It can be processing power, storage, memory, or bandwidth. So if an attacker sends way more traffic in your way than your network can receive, your network access will be severely degraded. No matter if there's a service active to receive the packets.

The most effective way to counter such attack is to work with your upstream ISP and tell them to drop every packet assumed to be part of an attack. That is not cheap or easy, but is how most internet services protect themselves.

The other way is to increase the network bandwidth to have more resources than the attacker, but this is more expensive than the former solution.

Not the answer you're looking for? Browse other questions tagged or ask your own question.