Well I'm used to face attacks using plugins exploits, but I've never seen attacks like this on a stock server...
Best regards AnAkIn . a écrit : > That's nothing new. This has been posted on this list many times over the > past year. > > 2009/10/16 Russell Jones <[email protected]> > > >> Interesting. >> >> We faced people spamming RCON before, which was fixed by just >> blacklisting the offender's IP addresses in APF. >> >> I wonder if there's an iptables chain you could use to immediately drop >> packets that have a 0 length? >> >> >> >> J.Miribel wrote: >> >>> Hello, >>> >>> It seems there is a new exploit allowing people to spam a HL2 server is >>> out.. In fact it spams the serveur with empty UDP queries.. >>> It does not crash the server but if you look at the server with HLSW the >>> ping skyrockets to 1000 (instead of.. 10). Impossible to connect to the >>> server neither. >>> >>> We just added his IP in our ACL to fix my issue, but not everyone has L3 >>> switches out there.. >>> >>> Any one faced that problem before ? Is there a workaround other than >>> filtering the attacker's IP ? >>> >>> Oh and yeah I left the guy's IP public.. ;) >>> >>> Here are my tcpdump: >>> 18:45:56.661173 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.662657 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.663906 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.665371 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.666848 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.668084 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.669294 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.670544 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.672015 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.673282 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.674463 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.675939 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.677175 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.678408 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.679886 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.681135 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.682617 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.683843 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.685315 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.686565 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.687801 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.689245 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.690471 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.691715 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.693198 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.694425 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.695662 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.696898 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.698630 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.699870 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.701090 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.702568 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.703805 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.705042 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.706513 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.707756 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.708980 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.710258 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.711696 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.712892 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.714203 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.715881 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.717085 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.718396 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.719806 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.721030 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.722343 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> 18:45:56.723501 IP ANancy-157-1-14-14.w86-204.abo.wanadoo.fr.1473 > >>> XXX.XXX.XXX.XXX.27015: UDP, length 0 >>> >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> >> please visit: >> >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
