I can't download the file because the limit was reached. Can you upload it somewhere else so I can check out what it's doing with Wireshark?
-----Original Message----- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Hüseyin Cerik Sent: Sunday, January 18, 2009 11:32 AM To: Ronny Schedel Cc: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! our servers are already linux and ip tables i bought from a company called crowfire which they are based in germany and opend the ip tables which there isnt a problem with but there is a slight problem such as it connects 1 ip once and does stupid things which therefore it it makes the pings high which then it it disconnects the server the place i bought the server made me a small script it over reads the packets but that dont work fully either because the players get banned from the ip tables Ronny Schedel schrieb: > Send me the packet and the connection rate. > > ----- Original Message ----- From: "Hüseyin Cerik" > <azrail.2...@gmail.com> > To: "Half-Life dedicated Linux server mailing list" > <hlds_linux@list.valvesoftware.com> > Sent: Sunday, January 18, 2009 8:06 PM > Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE > !!! > > > we have written a script over the ip tables but it just over reads the > incoming packets and throws it away > but if we put down the packet it bans the normal players aswell and > thats not good so then i just need to close down the server and go there > must be another settings but if u can write me a script then i can try > it on my server thats not a problem and like ddos there isnt a > connection for 20-30 from 1 ip its only just 1 ip that it so that > pressurises and disconnects the server... > > > > Ronny Schedel schrieb: >> I would suggest tcpdump to use for your analyzes... >> >> >> ----- Original Message ----- From: "Pawel" <tra...@gmail.com> >> To: "Half-Life dedicated Linux server mailing list" >> <hlds_linux@list.valvesoftware.com> >> Sent: Sunday, January 18, 2009 7:41 PM >> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO >> JOKE !!! >> >> >> Hmm are there any logs in linux? That we can find user sending high rate >> packets? >> >> On Sun, Jan 18, 2009 at 7:27 PM, Ronny Schedel >> <i...@ronny-schedel.de>wrote: >> >> >>> Setup a passworded server, run the given tool pointing on this server, >>> analyze the traffic. It will probably the same packet each time with a >>> high >>> rate. So you can easly filter this packet coming from the same IP >>> address >>> on >>> a high rate. It's just that easy. >>> >>> >>> ----- Original Message ----- >>> From: "Wolfie - Cybernetic" <a...@cybernetic-servers.co.uk> >>> To: "'Half-Life dedicated Linux server mailing list'" >>> <hlds_linux@list.valvesoftware.com> >>> Sent: Sunday, January 18, 2009 7:17 PM >>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO >>> JOKE !!! >>> >>> >>> The problem is when this happens the ddos is done on the udp css >>> port, so >>> it's not easy to filter out. >>> >>> -----Original Message----- >>> From: hlds_linux-boun...@list.valvesoftware.com >>> [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Ronny >>> Schedel >>> Sent: 18 January 2009 18:11 >>> To: azrail.2...@gmail.com; Half-Life dedicated Linux server mailing >>> list >>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO >>> JOKE !!! >>> >>> Analyze the network traffic and setup appropriate firewall rules. >>> It's not >>> that hard to prevent it. >>> >>> >>> ----- Original Message ----- >>> From: "Hüseyin Cerik" <azrail.2...@gmail.com> >>> To: "Half-Life dedicated Linux server mailing list" >>> <hlds_linux@list.valvesoftware.com> >>> Sent: Sunday, January 18, 2009 6:52 PM >>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO >>> JOKE !!! >>> >>> >>> think about it i am a bad person and im playin a game in a server and >>> because i dont obey with the rules they ban me so i suggest to use the >>> programs i have in my hands and crash down the servers. now our days >>> people are even scared to throw poeple because these types of programs >>> put them down if u think about the worlds most top server VIA they dont >>> even have a chance about this... >>> >>> we need to find a solution about what we can do for this situation >>> >>> >>> >>> JäKë T schrieb: >>> >>>> Never tried it out but had this issue with my server a few times lags >>>> >>> like >>> >>> >>>> a mother then everyone leaves. Need a fix for it. >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>> Date: Sun, 18 Jan 2009 15:11:45 +0100 >>>>> From: tra...@gmail.com >>>>> To: hlds_linux@list.valvesoftware.com >>>>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO >>>>> JOKE >>>>> !!! >>>>> >>>>> I tried it on my servers. It is working. Players felt huge spikes and >>>>> after >>>>> 5 minutes from 20/20 players it had 0/20 :> >>>>> >>>>> On Sun, Jan 18, 2009 at 1:29 PM, Marcel <hlds_li...@vermasslt.de> >>>>> >>> wrote: >>> >>>>> >>>>>> It's actually DoS, not DDoS... >>>>>> >>>>>> Somebody tried that file? >>>>>> >>>>>> >>>>>> - Marcel >>>>>> >>>>>> _______________________________________________ >>>>>> To unsubscribe, edit your list preferences, or view the list >>>>>> archives, >>>>>> please visit: >>>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>>>>> >>>>>> >>>>>> >>>>> _______________________________________________ >>>>> To unsubscribe, edit your list preferences, or view the list >>>>> archives, >>>>> please visit: >>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>>>> >>>>> >>>> _________________________________________________________________ >>>> Keep in touch and up to date with friends and family. Make the >>>> connection >>>> now. >>>> http://www.microsoft.com/windows/windowslive/ >>>> _______________________________________________ >>>> To unsubscribe, edit your list preferences, or view the list archives, >>>> please visit: >>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>>> >>>> >>>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >>> >>> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list >> archives, please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux >> >> > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
