what about a attack that look like this Alred?:
NET_QueuePacket: Oversize packet from 221.116.252.87:53 NET_QueuePacket: Oversize packet from 99.40.29.17:53 NET_QueuePacket: Oversize packet from 213.240.254.14:53 NET_QueuePacket: Oversize packet from 218.65.86.45:19 NET_QueuePacket: Oversize packet from 124.34.255.116:53 NET_QueuePacket: Oversize packet from 110.4.44.102:19 NET_QueuePacket: Oversize packet from 74.218.109.202:19 NET_QueuePacket: Oversize packet from 209.62.23.230:53 NET_QueuePacket: Oversize packet from 209.62.23.230:53 NET_QueuePacket: Oversize packet from 123.30.186.226:19 > From: alf...@valvesoftware.com > To: my_azz...@yahoo.com; hlds_linux@list.valvesoftware.com > Date: Fri, 27 Jul 2012 22:28:18 +0000 > Subject: Re: [hlds_linux] New 1.6 Exploit > > This sounds like a traditional DoS attack, fill up your pipe to the internet > and users will disconnect, do that with UDP traffic to the right port and it > will also slow the server down. > > - Alfred > > -----Original Message----- > From: hlds_linux-boun...@list.valvesoftware.com > [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Collin Howard > Sent: Friday, July 27, 2012 3:14 PM > To: Half-Life dedicated Linux server mailing list > Subject: [hlds_linux] New 1.6 Exploit > > There seems to be a new exploit, it lags the server. In console you see a lot > of "Client sent drop" msgs. Those clients never even connect or were not even > playing. > > It was from a specific ip (190.43.110.55) once I banned it, it stopped. > > Dropped trag_fugi from server > Reason: Client sent 'drop' > Dropped KoBraTa from server > Reason: Client sent 'drop' > Dropped [CS MAFIA] The Dark from server > Reason: Client sent 'drop' > Dropped izwinqwaizaheadshota from server > Reason: Client sent 'drop' > Dropped ILOVEtoPEE from server > Reason: Client sent 'drop' > Dropped ***FroM north from server > Reason: Client sent 'drop' > Dropped unReaL`-` from server > Reason: Client sent 'drop' > Dropped SoFtY from server > Reason: Client sent 'drop' > Dropped tekata-shveps from server > Reason: Client sent 'drop' > Dropped AmEriCA*** from server > Reason: Client sent 'drop' > Dropped .:C{o}oLBo[y]:. from server > Reason: Client sent 'drop' > Dropped aHoHuMen from server > Reason: Client sent 'drop' > Dropped ludaka from server > Reason: Client sent 'drop' > Dropped MonsteRArmY*Johnny.ftw from server > Reason: Client sent 'drop' > Dropped VIP*igracha*VIP from server > Reason: Client sent 'drop' > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please > visit: > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
