we have written a script over the ip tables but it just over reads the incoming packets and throws it away but if we put down the packet it bans the normal players aswell and thats not good so then i just need to close down the server and go there must be another settings but if u can write me a script then i can try it on my server thats not a problem and like ddos there isnt a connection for 20-30 from 1 ip its only just 1 ip that it so that pressurises and disconnects the server...
Ronny Schedel schrieb: > I would suggest tcpdump to use for your analyzes... > > > ----- Original Message ----- > From: "Pawel" <[email protected]> > To: "Half-Life dedicated Linux server mailing list" > <[email protected]> > Sent: Sunday, January 18, 2009 7:41 PM > Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! > > > Hmm are there any logs in linux? That we can find user sending high rate > packets? > > On Sun, Jan 18, 2009 at 7:27 PM, Ronny Schedel <[email protected]>wrote: > > >> Setup a passworded server, run the given tool pointing on this server, >> analyze the traffic. It will probably the same packet each time with a >> high >> rate. So you can easly filter this packet coming from the same IP address >> on >> a high rate. It's just that easy. >> >> >> ----- Original Message ----- >> From: "Wolfie - Cybernetic" <[email protected]> >> To: "'Half-Life dedicated Linux server mailing list'" >> <[email protected]> >> Sent: Sunday, January 18, 2009 7:17 PM >> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! >> >> >> The problem is when this happens the ddos is done on the udp css port, so >> it's not easy to filter out. >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Ronny >> Schedel >> Sent: 18 January 2009 18:11 >> To: [email protected]; Half-Life dedicated Linux server mailing list >> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! >> >> Analyze the network traffic and setup appropriate firewall rules. It's not >> that hard to prevent it. >> >> >> ----- Original Message ----- >> From: "Hüseyin Cerik" <[email protected]> >> To: "Half-Life dedicated Linux server mailing list" >> <[email protected]> >> Sent: Sunday, January 18, 2009 6:52 PM >> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! >> >> >> think about it i am a bad person and im playin a game in a server and >> because i dont obey with the rules they ban me so i suggest to use the >> programs i have in my hands and crash down the servers. now our days >> people are even scared to throw poeple because these types of programs >> put them down if u think about the worlds most top server VIA they dont >> even have a chance about this... >> >> we need to find a solution about what we can do for this situation >> >> >> >> JäKë T schrieb: >> >>> Never tried it out but had this issue with my server a few times lags >>> >> like >> >> >>> a mother then everyone leaves. Need a fix for it. >>> >>> >>> >>> >>> >>> >>> >>>> Date: Sun, 18 Jan 2009 15:11:45 +0100 >>>> From: [email protected] >>>> To: [email protected] >>>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE >>>> !!! >>>> >>>> I tried it on my servers. It is working. Players felt huge spikes and >>>> after >>>> 5 minutes from 20/20 players it had 0/20 :> >>>> >>>> On Sun, Jan 18, 2009 at 1:29 PM, Marcel <[email protected]> >>>> >> wrote: >> >>>> >>>>> It's actually DoS, not DDoS... >>>>> >>>>> Somebody tried that file? >>>>> >>>>> >>>>> - Marcel >>>>> >>>>> _______________________________________________ >>>>> To unsubscribe, edit your list preferences, or view the list archives, >>>>> please visit: >>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>>>> >>>>> >>>>> >>>> _______________________________________________ >>>> To unsubscribe, edit your list preferences, or view the list archives, >>>> please visit: >>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>>> >>>> >>> _________________________________________________________________ >>> Keep in touch and up to date with friends and family. Make the >>> connection >>> now. >>> http://www.microsoft.com/windows/windowslive/ >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >>> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
