Re: [hlds] New server attack/exploit?

2008-04-21 Thread Nephyrin Zey
Nemu's Stomping Ground was also targetted around this time. It sounds like it may just be a generic DDoS someone was throwing around as all the traffic was inbound. I'm going for some burgers (mmm...) but I'll setup some packet monitoring when I get back to see whats going on if it happens again.

Re: [hlds] New server attack/exploit?

2008-04-21 Thread Gary Stanley
At 01:12 AM 4/21/2008, Tony Paloma wrote: My TF2 server is currently under attack and is being brought to its knees. The network graph shows lots of incoming data and the server is empty running at 10.0fps. I think somebody is spamming queries or something, but I'm not sure. Anybody know anything

Re: [hlds] New server attack/exploit?

2008-04-21 Thread Tony Paloma
It's a little late for an In N Out burget isn't it? Also, I forgot to mention: this same attack happened around the same time yesterday. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nephyrin Zey Sent: Sunday, April 20, 2008 11:03 PM To: Half-Life

[hlds] The big TF2 update

2008-04-21 Thread Andreas Grimm
Hopefully the changelog will include something like this: - Removal of the custom tab otherwise it wouldn't be a big update for me ... come on valve, do something great for your community! ___ To unsubscribe, edit your list preferences, or view the

Re: [hlds] The big TF2 update

2008-04-21 Thread GZ Coldorak
The update is for today, right? On Mon, Apr 21, 2008 at 8:35 AM, Andreas Grimm [EMAIL PROTECTED] wrote: Hopefully the changelog will include something like this: - Removal of the custom tab otherwise it wouldn't be a big update for me ... come on valve, do something great for your

[hlds] lag + screwing things up

2008-04-21 Thread Eric van Beesten
Recently i have posted a message about a big lag spike. No reaction to my post means I'm the only one having this problem (or nobody want to reply :) ). But it occurs me that after a lag spike things aren't in place in the map. For example, the closed gates (at the warmup time) at dustbowl are

Re: [hlds] lag + screwing things up

2008-04-21 Thread Tom Leighton
It seems to all be client side (Relating to the world updates), and possibly TF2 not sending a complete world update to all clients on a lagspike, resulting in players being on the wrong team (appearing to), fences in the middle of a map (walkthoughable), and basically little things screwed

Re: [hlds] lag + screwing things up

2008-04-21 Thread Kevin Ottalini
Eric, Get a copy of pingplotter (www.pingplotter.com) and run it on your server to a clean destination (perhaps your client machine) and let it run for a few days or a few weeks. See if there is any network outage that is in sync with your lag spikes - you may have to use a 10 second or

Re: [hlds] CS SERVER

2008-04-21 Thread viktor stojcev
From: viktor stojcev [EMAIL PROTECTED] Reply-To: Half-Life dedicated Win32 server mailing listhlds@list.valvesoftware.com To: hlds@list.valvesoftware.com Subject: [hlds] CS SERVER Date: Mon, 21 Apr 2008 15:03:10 + !!!J DON'T UNDERSTAND YOU...PLS HELP ME FOR CONF CS SERVER!!! BUT WHAT IS

[hlds] CS SERVER

2008-04-21 Thread viktor stojcev
!!!J DON'T UNDERSTAND YOU...PLS HELP ME FOR CONF CS SERVER!!! BUT WHAT IS IT? No auth servers parsed Disabling Valve Authentication. Adding master server 68.142.72.250:27010 Adding master server 72.165.61.189:27010 Could not establish connection to Steam servers. WHY?!!! PLS!

Re: [hlds] CS SERVER

2008-04-21 Thread tsuehpsyde
Oh lord. This email makes me cry. On Mon, Apr 21, 2008 at 10:12 AM, viktor stojcev [EMAIL PROTECTED] wrote: From: viktor stojcev [EMAIL PROTECTED] Reply-To: Half-Life dedicated Win32 server mailing listhlds@list.valvesoftware.com To: hlds@list.valvesoftware.com Subject: [hlds] CS SERVER

Re: [hlds] CS SERVER

2008-04-21 Thread Kitteny Berk
/ ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET NOD32 Antivirus, version of virus signature database 3043 (20080421) __ The message

Re: [hlds] CS SERVER

2008-04-21 Thread Saint K.
/ ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET NOD32 Antivirus, version of virus signature database 3043 (20080421) __ The message was checked by ESET NOD32

Re: [hlds] New server attack/exploit?

2008-04-21 Thread Tony Paloma
Would a synflood affect the performance of srcds? Whatever it was was causing srcds to spend tons of time between/during ticks and thus severely reducing the FPS. Nobody was on the server which is why I thought it might be queries but it could be something else like spamming connection attempts or

Re: [hlds] New server attack/exploit?

2008-04-21 Thread Alfred Reynolds
A syn-flood is a TCP attack, SRCDS queries and game data goes via UDP. In theory it could be a syn-flood attack on the RCON port but that would cause the machine to slow down (as the OS handles the syn's), not the game process only. It sounds like someone was sending you lots of query packets,

Re: [hlds] CS SERVER

2008-04-21 Thread Ook
/ ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET NOD32 Antivirus, version of virus signature database 3043 (20080421

Re: [hlds] lag + screwing things up

2008-04-21 Thread Eric van Beesten
Hee quicksilver, Tnx for the reply. I can look what the program does on my server. About your other questions. I have a E5345 quad core cpu with 3 GB memory and a 15K SAS drive. I'm running a 24 slots tf2, a 10 slots css warserver (almost empty 24/7) and a 32 slots trackmania (lag was even before

[hlds] Under attack again

2008-04-21 Thread Tony Paloma
I'm under attack again. The people attacking are now trying to attack my FTP server as well (so I have some IPs). I've also got some .cap files from Microsoft Network Monitor. I'm looking for other monitor tools right now. (003205) 4/21/2008 6:26:26 PM - (not logged in) (96.250.36.94) connected

Re: [hlds] Under attack again

2008-04-21 Thread Tony Paloma
It looks like the attacker is just spamming connect/disconnect to any port he can get his hands on TCPC18492-111562:epmap pool-96-250-36-94.nycmny.fios.verizon.net:44654 ESTABLISHED TCPC18492-111562:1035 pool-96-250-36-94.nycmny.fios.verizon.net:44649 ESTABLISHED TCP

Re: [hlds] Under attack again

2008-04-21 Thread Mike Olsen
ban ban ban On Mon, Apr 21, 2008 at 4:29 PM, Tony Paloma [EMAIL PROTECTED] wrote: I'm under attack again. The people attacking are now trying to attack my FTP server as well (so I have some IPs). I've also got some .cap files from Microsoft Network Monitor. I'm looking for other monitor

Re: [hlds] Under attack again

2008-04-21 Thread Mike Stiehm
How did you find his steam ID? From: [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Date: Mon, 21 Apr 2008 16:44:58 -0700 Subject: Re: [hlds] Under attack again I requested him as a friend on Steam friends and the attack suddenly stopped. Interesting... -Original Message-

Re: [hlds] Under attack again

2008-04-21 Thread Andrew DeMerse
As someone who does work for an ISP, I can assure you that one complaint does not shut off service. Especially if it's low level, such as this one. However, I would still advise sending an email with the logs to [EMAIL PROTECTED] Date: Mon, 21 Apr 2008 16:46:14 -0700 From: [EMAIL PROTECTED]

Re: [hlds] Under attack again

2008-04-21 Thread Spencer 'voogru' MacDonald
PeerGuardian is your friend. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Armstrong Sent: Monday, April 21, 2008 7:49 PM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Under attack again I believe if you place an IP ban

Re: [hlds] Under attack again

2008-04-21 Thread bl4nkeh
My guess is he searched his logs for any occurance of the IP, and noticed the player had been on the server before. Mike Stiehm wrote: How did you find his steam ID? From: [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Date: Mon, 21 Apr 2008 16:44:58 -0700 Subject: Re: [hlds] Under

Re: [hlds] Under attack again

2008-04-21 Thread Spencer 'voogru' MacDonald
Or like me and runs an SQL database with all of the data from everyone who has ever set foot in his server. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of bl4nkeh Sent: Monday, April 21, 2008 7:59 PM To: Half-Life dedicated Win32 server mailing list

Re: [hlds] Under attack again

2008-04-21 Thread Tony Paloma
Right, thus the SQL statement above his SteamID in my email. Now he's attacking it as soon as the server gets about half full. Very frustrating. I'm working with The Planet to see if I can get his IP blocked. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf