In the case I'm referring to, the attacker is not doing it from inside the server so there is no IP. He is doing it using some sort of UDP attack from outside the game.
-----Original Message----- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Mike Vail Sent: Tuesday, October 20, 2009 8:49 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Any new CSS exploits? I too would love to solve this. A community I play CSS with has been suffering from this same problem on 2 of its servers for over a week and they really need help. Their tech has some how limitied the affects of the attack, but it is still happening. The community is running a dedicated Windows Server box with an California ISP who is unwilling to track the offender because the community doesn't pay for Managed hosting with them. According to a Wireshark trap, the attacker is spoofing multiple IPs. Any help would be greatly appreciated. -----Original Message----- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Bobby35ny Sent: Tuesday, October 20, 2009 8:13 AM To: 'Half-Life dedicated Win32 server mailing list' Subject: Re: [hlds] Any new CSS exploits? Some spoofing is going on, I ran wireshark, looks like he is using A2S_INFO hack. I know they kind of fixed it with TF2, anyone know how to defeat this on CSS? -bobby -----Original Message----- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Scott Marshall Sent: Tuesday, October 20, 2009 5:21 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Any new CSS exploits? You could use a proxy to forward your game data. This in turn would give you a different ip. I think this is where he is coming from =) On Tue, Oct 20, 2009 at 10:10 PM, w4rezz <w4r...@gmail.com> wrote: > You cant use proxy ingame lol > > 2009/10/20 Bobby35ny <bobby3...@gmail.com> > > > Started last week. Person comes in the server and boom the server > crashes. > > No warning no nothing. Guy with the same ip does it all the time. > > Prolly > a > > proxy, changes ip once hes nailed. > > > > -bobby > > > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list > > archives, please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.422 / Virus Database: 270.14.22/2446 - Release Date: 10/19/09 14:33:00 _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
