Re: [hlds] DDOS Prevention with IPV6

[German Hoeffner]

Hello, first of all, what exactly are you/we talking about? Are we talking about exploits in handling the packets in the source engine or actual DDoS attacks? If we're talking about the second Arbor Networks (http://www.arbornetworks.com/) saw the first IPv6 DDoS attacks in 2012 already - it's just a matter of how much effort the attacker wants to put into attacking you. Most reflected and amplification attacks should work with IPv6 as well. If we're talking about actual DDoS attacks (on IPv4/IPv6) a windows firewall or iptables will most likely not help you. We've not seen any attacks below 5 Gbit for some time now - easily going up to 100 Gbit. 5 Gbit+ will probably exceed the port-speed (aka your uplink) of most servers hosting gameservers. Sincerely, German Hoeffner Ideal-Hosting UG (haftungsbeschränkt) Haagstraße 9 91054 Erlangen Germany German Hoeffner g.hoeff...@ideal-hosting.biz Tel: +49 (0) 9131-9279944-201 Fax: +49 (0) 9131-9279939 Managing director: Ulrich Strunz Com. Register: Fürth HRB 7196 EU VAT Nr.: DE282838796 On 26.03.2014 16:12, Bruno Garcia wrote: Windows Firewall is only good enough to peal a potato. Iptables is the way to go. Although, DDoS attacks can't be prevented, you can null-route all the packets from the attack, but (if the attack is big enough) it uses up all your resources to do so, thus causing your servers to malfunction. Furthermore, do you know if this is a DDoS attack, or is this some srcds protocol hack? You need to patch those too with plugins. On Wed, Mar 26, 2014 at 12:07 PM, Andre Müller <gbs.dead...@gmail.com> wrote: There was someone who started GMOD-Server with ipv6. I don't know if this was an evil hack or something with iptables.. But, changing to ipv6 doesn't prevent your server against DoS-Attacks. There is only one way: Find out the bad packets and filter them with iptables/windows-firewall. I don't know if the Windows-Firewall can filter packets with specified strings. Greetings Andre Müller 2014-03-26 15:20 GMT+01:00 Ariel Pinto <ari3lpi...@gmail.com>: Thanks a lot Saint K. ! On Wed, Mar 26, 2014 at 4:13 PM, Saint K. <sai...@specialattack.net> wrote: IPv6 is not yet supported. Furthermore, changing from IPv4 to IPv6 won't help you anyway in case of the DDoS. Saint K. Ariel Pinto , 3/26/2014 3:12 PM: Hi everyone, Is it possible to prevent/reduce DDOS attacks on game servers if I start to use IPV6 instead of IPV4 ? Thanks in advanced! _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds