Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-24 Thread Jacob Juul
it was) they met in court and the guy is now gone :-) but a year.. hope other countries are faster than Denmark hehe From: os...@dataviruset.com To: hlds_linux@list.valvesoftware.com Date: Wed, 23 May 2012 17:45:10 +0200 Subject: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] You can't

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-24 Thread Adam Nowacki
is now gone :-) but a year.. hope other countries are faster than Denmark hehe From: os...@dataviruset.com To: hlds_linux@list.valvesoftware.com Date: Wed, 23 May 2012 17:45:10 +0200 Subject: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] You can't stop bandwitdh oriented (UDP) DDoS

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Ivan Ivanov
Hello, Thanks for the *only* reply :) This didn't help though. They're still able to flood the IP/port. Оригинално писмо От: Marco Padovan e...@evcz.tk Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: hlds_linux@list.valvesoftware.com Изпратено

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Saint K .
...@list.valvesoftware.com [hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Ivan Ivanov [harryp...@abv.bg] Sent: 23 May 2012 13:12 To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] Hello, Thanks for the *only* reply :) This didn't help though

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Marcel
On 23.05.2012 13:12, Ivan Ivanov wrote: Thanks for the*only* reply :) This didn't help though. They're still able to flood the IP/port. You should let us know how you have blocked it. Maybe there's the mistake. - Marcel ___ To unsubscribe, edit

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Eli Witt
* reply :) This didn't help though. They're still able to flood the IP/port. Оригинално писмо От: Marco Padovan e...@evcz.tk Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: hlds_linux@list.valvesoftware.com Изпратено на: Вторник, 2012, Май 22

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Jacob Juul
:21:57 +0200 From: hlds_li...@vermasslt.de To: hlds_linux@list.valvesoftware.com Subject: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] On 23.05.2012 13:12, Ivan Ivanov wrote: Thanks for the*only* reply :) This didn't help though. They're still able to flood the IP/port. You

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-23 Thread Oskar Levin
...@list.valvesoftware.com] För Jacob Juul Skickat: den 23 maj 2012 16:17 Till: hlds_linux@list.valvesoftware.com Ämne: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] Hello havent read all the posts, but as far as i can see you still need a fix. Ddos can be block in several ways Dos attack

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-21 Thread Ivan Ivanov
Ok. Here you go: http://pastebin.com/TDTufV1s Оригинално писмо От: Mart-Jan Reeuwijk mreeu...@yahoo.com Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list Изпратено на: Събота, 2012, Май 19 16

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-21 Thread Marco Padovan
, Ivan Ivanov ha scritto: Ok. Here you go: http://pastebin.com/TDTufV1s Оригинално писмо От: Mart-Jan Reeuwijk mreeu...@yahoo.com Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list Изпратено на

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-19 Thread Ivan Ivanov
b10f 4400 .Hi.i}D. Оригинално писмо От: Ivan Ivanov harryp...@abv.bg Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list Изпратено на: Събота, 2012, Май 19 00:14:09 EEST

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-19 Thread Mart-Jan Reeuwijk
: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] Here's part of the tcpdump: 02:11:17.138473 IP (tos 0x0, ttl 27, id 19245, offset 0, flags [DF], proto UDP (17), length 37) 59.31.122.64.27005 my.ip.27015: [no cksum] UDP, length 7

[hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ivan Ivanov
Hello, For the last few days I've been attacked by a big(huge) number of international IPs [Russia, USA, Korea, China, Italy etc..]. It's obviously a ddos attacks, so at first I tried different protections (iptables rules, apf, csf firewalls, ddos deflate and none of them helped). I also asked

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Adam Nowacki
On 2012-05-18 18:28, Ivan Ivanov wrote: Hello, For the last few days I've been attacked by a big(huge) number of international IPs [Russia, USA, Korea, China, Italy etc..]. It's obviously a ddos attacks, so at first I tried different protections (iptables rules, apf, csf firewalls, ddos

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ivan Ivanov
iptraf shows that they're with 46 bytes length, tcpdump with 35,36,37... Only UDP and only ot 27015 port. payload? - whats that :D Оригинално писмо От: Adam Nowacki nowa...@platinum.linux.pl Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread bp
On Fri, May 18, 2012 at 6:59 PM, Ivan Ivanov harryp...@abv.bg wrote: payload? - whats that :D The contents of the packets you were getting attacked with. --bp ___ To unsubscribe, edit your list preferences, or view the list archives, please visit:

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ivan Ivanov
Ok. So how do i get that. Any tool for extracting all the information that Adam Nowacki wanted? Оригинално писмо От: bp badpazzw...@gmail.com Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ronny Schedel
tcpdump Ivan Ivanov harryp...@abv.bg schrieb: Ok. So how do i get that. Any tool for extracting all the information that Adam Nowacki wanted? Оригинално писмо От: bp badpazzw...@gmail.com Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Marco Padovan
provide exact specs of the attack (maybe a tcpdump) + rates figures (PPS/ bw) Il 18/05/2012 18:28, Ivan Ivanov ha scritto: Hello, For the last few days I've been attacked by a big(huge) number of international IPs [Russia, USA, Korea, China, Italy etc..]. It's obviously a ddos attacks, so

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ivan Ivanov
). Оригинално писмо От: Marco Padovan e...@evcz.tk Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list Изпратено на: Петък, 2012, Май 18 22:54:05 EEST provide exact specs of the attack (maybe a tcpdump) + rates figures

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread px@ipt
: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs] До: Half-Life dedicated Linux server mailing list Изпратено на: Петък, 2012, Май 18 22:54:05 EEST provide exact specs of the attack (maybe a tcpdump) + rates figures (PPS/ bw) Il 18/05/2012 18:28, Ivan Ivanov ha scritto: Hello

Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs]

2012-05-18 Thread Ivan Ivanov
Hello, Please explain how. Machine is powerful enought, but no rules added until now help. Droping all UDP traffic won't help either, cause HLDS works on UDP... Оригинално писмо От: px@ipt p...@i.kiev.ua Относно: Re: [hlds_linux] [hlds] HLDS ddos attacks [spoofed IPs