Not necessarily, people have been targeting only srcds, lagging it out only rdp and ssh are fine.
TeRmInAtEr2 wrote: > Numerous things could be the cause here. It could be an actual DDoS attack > from a botnet or a few people who have a decent connection DDoSing you..... > Or it could be your provider having connection issues (unreliable > datacenter?). If you rent a server from a GSP, speak to them about the lag. > It could be their datacenter or them actually doing something with the > server to cause the lag. But if you own a box or rent a dedi from a > datacenter, speak to them about the lag. They may have to mitigate the DDoS > attack to get your server running normally. If the box is still discoverable > via lists and the server isn't down totally, it's definatly NOT a DDoS > attack. > > Try and remote desktop or SSH in and watch the CPU of the server. If you can > maintain a connection to the box without disconnecting or finding noticable > lag in response times, then it's not a DDoS, instead some script kiddie shit > that you can get rid of with that plugin. Hope that helps? > > On Sun, May 24, 2009 at 6:23 PM, "[??R] The-/<iller" <[email protected] > >> wrote: >> > > >> We were getting tcp rcon spammed, try wireshark to see what theyre >> spamming it will point it out pretty easily with malformed packets, if >> its just TCP 27015 block that, you will lose rcon but save your server. >> >> Cc2iscooL wrote: >> >>> Unfortunately people are finding ways around this plugin using basic UDP >>> packet spamming. This plugin will block the script kiddies but not the >>> >> more >> >>> advanced users. >>> >>> -- >>> Cc2iscooL >>> Head Admin/Owner >>> http://www.cc2iscool.com >>> >>> >>> On Sun, May 24, 2009 at 4:53 PM, Mike Stiehm <[email protected]> >>> >> wrote: >> >>> >>>> Tony Paloma has a plugin that should help out. >>>> >>>> http://www.sourceop.com/modules.php?name=Downloads >>>> >>>> -----Original Message----- >>>> From: [email protected] >>>> [mailto:[email protected]] On Behalf Of admin >>>> Sent: Sunday, May 24, 2009 4:50 PM >>>> To: Half-Life dedicated Win32 server mailing list >>>> Subject: [hlds] dDos attacs >>>> >>>> our server i under some heavy ddos attacks every 45min to an hour. any >>>> one know a good method on how to prevent this from happening or make >>>> them less frequent >>>> >>>> _______________________________________________ >>>> To unsubscribe, edit your list preferences, or view the list archives, >>>> please visit: >>>> http://list.valvesoftware.com/mailman/listinfo/hlds >>>> >>>> >>>> __________ Information from ESET NOD32 Antivirus, version of virus >>>> signature >>>> database 4098 (20090522) __________ >>>> >>>> The message was checked by ESET NOD32 Antivirus. >>>> >>>> http://www.eset.com >>>> >>>> >>>> >>>> __________ Information from ESET NOD32 Antivirus, version of virus >>>> signature >>>> database 4098 (20090522) __________ >>>> >>>> The message was checked by ESET NOD32 Antivirus. >>>> >>>> http://www.eset.com >>>> >>>> >>>> >>>> _______________________________________________ >>>> To unsubscribe, edit your list preferences, or view the list archives, >>>> please visit: >>>> http://list.valvesoftware.com/mailman/listinfo/hlds >>>> >>>> >>>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> >> please visit: >> >>> http://list.valvesoftware.com/mailman/listinfo/hlds >>> >>> >>> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds >> >> > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
