Also, the mod is no use for things like match servers, which tend not to have sourcemod on them
> -----Original Message----- > From: [email protected] [mailto:hlds- > [email protected]] On Behalf Of Kyle Sanderson > Sent: 24 October 2010 05:59 > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] Source packet flood exploit > > This exploit has been public knowledge since the game came out, Valve > does not care. > > The query cache will only get you so far, the engine will still fold > if enough packets are sent. > Kyle. > > On Sat, Oct 23, 2010 at 7:57 PM, HL-SDK Synths <[email protected]> > wrote: > > Not only caching, but perhaps the plugin should be built to rate- > limit to > > certain IPs. If it is open source, someone may be able to implement > this for > > you. > > > > On Sat, Oct 23, 2010 at 10:04 PM, goatscaper Goatso > <[email protected]>wrote: > > > >> Nah no luck, server is still dying under the attack. > >> > >> On Sun, Oct 24, 2010 at 2:54 AM, goatscaper Goatso > <[email protected] > >> >wrote: > >> > >> > Woah, thanks a lot man. > >> > > >> > That's incredible. > >> > > >> > So even if I have like 50 requests a second, this should ease the > issue? > >> > > >> > > >> > On Sun, Oct 24, 2010 at 2:46 AM, Michael Krasnow > <[email protected]> > >> wrote: > >> > > >> >> dude, http://forums.alliedmods.net/showthread.php?t=135543 > >> >> > >> >> On Sat, Oct 23, 2010 at 9:37 PM, goatscaper Goatso < > >> [email protected] > >> >> >wrote: > >> >> > >> >> > The issue is TSource Engine Query is what Steam uses in order > to > >> >> retrieve > >> >> > server data, this isn't unique to my server, your server could > be > >> >> attacked > >> >> > in the same way. > >> >> > > >> >> > Imagine it like 1,000 people rapidly clicking the "refresh" > button on > >> >> the > >> >> > server information window. > >> >> > > >> >> > On Sun, Oct 24, 2010 at 2:23 AM, Michael Krasnow > <[email protected]> > >> >> wrote: > >> >> > > >> >> > > use something like querycache, > >> >> > > > >> >> > > On Sat, Oct 23, 2010 at 9:19 PM, goatscaper Goatso < > >> >> [email protected] > >> >> > > >wrote: > >> >> > > > >> >> > > > Malicious users can continuously spam the TSource Engine > Query USP > >> >> > packet > >> >> > > > to > >> >> > > > any given server, causing the server to crash under the > pressure. > >> >> > > > > >> >> > > > I've been subject to this spam and I believe Valve should > do > >> >> something > >> >> > in > >> >> > > > order to prevent this packet from being spammed. If I block > the > >> >> packet > >> >> > > then > >> >> > > > legitimate users cannot see my game, if I let it go, my > game is > >> >> > > unplayable. > >> >> > > > _______________________________________________ > >> >> > > > To unsubscribe, edit your list preferences, or view the > list > >> >> archives, > >> >> > > > please visit: > >> >> > > > http://list.valvesoftware.com/mailman/listinfo/hlds > >> >> > > > > >> >> > > > >> >> > > > >> >> > > > >> >> > > -- > >> >> > > Michael Krasnow > >> >> > > http://mnkras.com > >> >> > > [email protected] > >> >> > > _______________________________________________ > >> >> > > To unsubscribe, edit your list preferences, or view the list > >> archives, > >> >> > > please visit: > >> >> > > http://list.valvesoftware.com/mailman/listinfo/hlds > >> >> > > > >> >> > _______________________________________________ > >> >> > To unsubscribe, edit your list preferences, or view the list > archives, > >> >> > please visit: > >> >> > http://list.valvesoftware.com/mailman/listinfo/hlds > >> >> > > >> >> > >> >> > >> >> > >> >> -- > >> >> Michael Krasnow > >> >> http://mnkras.com > >> >> [email protected] > >> >> _______________________________________________ > >> >> To unsubscribe, edit your list preferences, or view the list > archives, > >> >> please visit: > >> >> http://list.valvesoftware.com/mailman/listinfo/hlds > >> >> > >> > > >> > > >> _______________________________________________ > >> To unsubscribe, edit your list preferences, or view the list > archives, > >> please visit: > >> http://list.valvesoftware.com/mailman/listinfo/hlds > >> > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list > archives, please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
