Re: [ioquake3] Successful getchallenge DoS attack requires 1MB/sec currently

2010-11-10 Thread Ludwig Nussel
Nerius Landys wrote: I have not checked the TCP/IP stack code before, but how does someone like BSD handle storing of SYN packets in their network code? I imagine SYN packet is similar to challenge, but I don't know too much about TCP/IP. The trick is to not store the cookie on the server but

Re: [ioquake3] Successful getchallenge DoS attack requires 1MB/sec currently

2010-11-10 Thread Patrick Baggett
OK so 1024 getchallenge packets every 40 milliseconds. Each getchallenge packet's payload is about 20 bytes or so. Add the UDP header and that probably goes up to about 40 bytes (I actually don't know how bit the UDP headers are off hand, would have to read the specs). OK, so I need to