Numerous things could be the cause here. It could be an actual DDoS attack from a botnet or a few people who have a decent connection DDoSing you..... Or it could be your provider having connection issues (unreliable datacenter?). If you rent a server from a GSP, speak to them about the lag. It could be their datacenter or them actually doing something with the server to cause the lag. But if you own a box or rent a dedi from a datacenter, speak to them about the lag. They may have to mitigate the DDoS attack to get your server running normally. If the box is still discoverable via lists and the server isn't down totally, it's definatly NOT a DDoS attack.
Try and remote desktop or SSH in and watch the CPU of the server. If you can maintain a connection to the box without disconnecting or finding noticable lag in response times, then it's not a DDoS, instead some script kiddie shit that you can get rid of with that plugin. Hope that helps? On Sun, May 24, 2009 at 6:23 PM, "[??R] The-/<iller" <[email protected] > wrote: > We were getting tcp rcon spammed, try wireshark to see what theyre > spamming it will point it out pretty easily with malformed packets, if > its just TCP 27015 block that, you will lose rcon but save your server. > > Cc2iscooL wrote: > > Unfortunately people are finding ways around this plugin using basic UDP > > packet spamming. This plugin will block the script kiddies but not the > more > > advanced users. > > > > -- > > Cc2iscooL > > Head Admin/Owner > > http://www.cc2iscool.com > > > > > > On Sun, May 24, 2009 at 4:53 PM, Mike Stiehm <[email protected]> > wrote: > > > > > >> Tony Paloma has a plugin that should help out. > >> > >> http://www.sourceop.com/modules.php?name=Downloads > >> > >> -----Original Message----- > >> From: [email protected] > >> [mailto:[email protected]] On Behalf Of admin > >> Sent: Sunday, May 24, 2009 4:50 PM > >> To: Half-Life dedicated Win32 server mailing list > >> Subject: [hlds] dDos attacs > >> > >> our server i under some heavy ddos attacks every 45min to an hour. any > >> one know a good method on how to prevent this from happening or make > >> them less frequent > >> > >> _______________________________________________ > >> To unsubscribe, edit your list preferences, or view the list archives, > >> please visit: > >> http://list.valvesoftware.com/mailman/listinfo/hlds > >> > >> > >> __________ Information from ESET NOD32 Antivirus, version of virus > >> signature > >> database 4098 (20090522) __________ > >> > >> The message was checked by ESET NOD32 Antivirus. > >> > >> http://www.eset.com > >> > >> > >> > >> __________ Information from ESET NOD32 Antivirus, version of virus > >> signature > >> database 4098 (20090522) __________ > >> > >> The message was checked by ESET NOD32 Antivirus. > >> > >> http://www.eset.com > >> > >> > >> > >> _______________________________________________ > >> To unsubscribe, edit your list preferences, or view the list archives, > >> please visit: > >> http://list.valvesoftware.com/mailman/listinfo/hlds > >> > >> > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
