I created a special patch for Urban Terror 4.1 server code (open source, based off an old ioquake3) a month ago when the exploit became severe.
My code limits the total number of getinfo+getstatus responses to 48 for the previous 2 seconds elapsed. In addition, the code limits the number of getinfo+getstatus responses to any fixed IP address to 3 in the previous 2 seconds elapsed. I couldn't think of a better solution in the ioquake3 code. - Rambetter _______________________________________________ ioquake3 mailing list [email protected] http://lists.ioquake.org/listinfo.cgi/ioquake3-ioquake.org By sending this message I agree to love ioquake3 and libsdl.
