As far as I know all public exploits for HL1 engine were fixed by Valve, so
you don't need any additional protection if you're using the latest
binaries.

Initially only NOSTEAM servers were vulnerable to CSDOS and Born to be Pig
exploits, so Valve did nothing about them. This is why Anti CSDoS and
HLShield were so popular. But Valve fixed the bugs when the exploits were
used to attack legit servers (also they fixed other important exploits, like
the ones using bugs in SV_ParseVoiceData and SV_ParseCvarValue2 functions).

Note that the HL1 engine is still vulnerable to simple flood attacks. Also
probably the servers are still vulnerable if they allow users to download
files directly from server, so you should use only fast download for any
custom resources (and block the local downloads).

This is probably the latest update:

http://www.mail-archive.com/[email protected]/msg63861.html

Some are still waiting for Valve to release the client side update :))

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Marcel
Sent: Saturday, December 31, 2011 2:21 PM
To: Half-Life dedicated Linux server mailing list
Subject: [hlds_linux] Anti CS DOS

Hi,

It seems that I've missed a thing.

Can anybody tell me what all of this Anti CSDoS and HLShield is about? 
Is it really needed? I'm a bit afraid of loading a library from a .ro 
website where I don't have the source code ;)


Cheers

Marcel

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Reply via email to