The plugin only blocks specific spam unfortunately. We've been the target of some attacks that this plugin doesn't block and have had to mitigate them manually.
-- Cc2iscooL Head Admin/Owner http://www.cc2iscool.com 2009/5/24 TeRmInAtEr2 <terminat...@gmail.com> > Well damn. Looks like it's all up to the plugin, then. > > On Sun, May 24, 2009 at 6:35 PM, "[ЯтR] The-/<iller" < > kil...@righttorule.com > > wrote: > > > Not necessarily, people have been targeting only srcds, lagging it out > > only rdp and ssh are fine. > > > > TeRmInAtEr2 wrote: > > > Numerous things could be the cause here. It could be an actual DDoS > > attack > > > from a botnet or a few people who have a decent connection DDoSing > > you..... > > > Or it could be your provider having connection issues (unreliable > > > datacenter?). If you rent a server from a GSP, speak to them about the > > lag. > > > It could be their datacenter or them actually doing something with the > > > server to cause the lag. But if you own a box or rent a dedi from a > > > datacenter, speak to them about the lag. They may have to mitigate the > > DDoS > > > attack to get your server running normally. If the box is still > > discoverable > > > via lists and the server isn't down totally, it's definatly NOT a DDoS > > > attack. > > > > > > Try and remote desktop or SSH in and watch the CPU of the server. If > you > > can > > > maintain a connection to the box without disconnecting or finding > > noticable > > > lag in response times, then it's not a DDoS, instead some script kiddie > > shit > > > that you can get rid of with that plugin. Hope that helps? > > > > > > On Sun, May 24, 2009 at 6:23 PM, "[??R] The-/<iller" < > > kil...@righttorule.com > > > > > >> wrote: > > >> > > > > > > > > >> We were getting tcp rcon spammed, try wireshark to see what theyre > > >> spamming it will point it out pretty easily with malformed packets, if > > >> its just TCP 27015 block that, you will lose rcon but save your > server. > > >> > > >> Cc2iscooL wrote: > > >> > > >>> Unfortunately people are finding ways around this plugin using basic > > UDP > > >>> packet spamming. This plugin will block the script kiddies but not > the > > >>> > > >> more > > >> > > >>> advanced users. > > >>> > > >>> -- > > >>> Cc2iscooL > > >>> Head Admin/Owner > > >>> http://www.cc2iscool.com > > >>> > > >>> > > >>> On Sun, May 24, 2009 at 4:53 PM, Mike Stiehm <mikesti...@gmail.com> > > >>> > > >> wrote: > > >> > > >>> > > >>>> Tony Paloma has a plugin that should help out. > > >>>> > > >>>> http://www.sourceop.com/modules.php?name=Downloads > > >>>> > > >>>> -----Original Message----- > > >>>> From: hlds-boun...@list.valvesoftware.com > > >>>> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of admin > > >>>> Sent: Sunday, May 24, 2009 4:50 PM > > >>>> To: Half-Life dedicated Win32 server mailing list > > >>>> Subject: [hlds] dDos attacs > > >>>> > > >>>> our server i under some heavy ddos attacks every 45min to an hour. > any > > >>>> one know a good method on how to prevent this from happening or make > > >>>> them less frequent > > >>>> > > >>>> _______________________________________________ > > >>>> To unsubscribe, edit your list preferences, or view the list > archives, > > >>>> please visit: > > >>>> http://list.valvesoftware.com/mailman/listinfo/hlds > > >>>> > > >>>> > > >>>> __________ Information from ESET NOD32 Antivirus, version of virus > > >>>> signature > > >>>> database 4098 (20090522) __________ > > >>>> > > >>>> The message was checked by ESET NOD32 Antivirus. > > >>>> > > >>>> http://www.eset.com > > >>>> > > >>>> > > >>>> > > >>>> __________ Information from ESET NOD32 Antivirus, version of virus > > >>>> signature > > >>>> database 4098 (20090522) __________ > > >>>> > > >>>> The message was checked by ESET NOD32 Antivirus. > > >>>> > > >>>> http://www.eset.com > > >>>> > > >>>> > > >>>> > > >>>> _______________________________________________ > > >>>> To unsubscribe, edit your list preferences, or view the list > archives, > > >>>> please visit: > > >>>> http://list.valvesoftware.com/mailman/listinfo/hlds > > >>>> > > >>>> > > >>>> > > >>> _______________________________________________ > > >>> To unsubscribe, edit your list preferences, or view the list > archives, > > >>> > > >> please visit: > > >> > > >>> http://list.valvesoftware.com/mailman/listinfo/hlds > > >>> > > >>> > > >>> > > >> _______________________________________________ > > >> To unsubscribe, edit your list preferences, or view the list archives, > > >> please visit: > > >> http://list.valvesoftware.com/mailman/listinfo/hlds > > >> > > >> > > > _______________________________________________ > > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > > > > > > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
