If you run a tcpdump and upload it somewhere we can see the exact content...

you can ratelimit A2S queries using hashlimit but that can affect new
players connections.

Seeing your log it looks like a spoofed attack... double check the TTL...
generally spoofed packets are easily detected due to the TTL staying
constant (and way to high to be real..)


On Mon, Sep 2, 2013 at 11:12 AM, Michael Johansen <michs...@live.no> wrote:

> I've tried that, and it doesn't work. For now the solution is to run Query
> Cache to make the server playable, it will still disappear from the
> serverbrowser though. Is there a solution to that? Somehow rate-limiting
> A2S queries?
>
> > From: evo...@gmail.com
> > To: hlds_linux@list.valvesoftware.com
> > Date: Mon, 2 Sep 2013 04:10:15 -0400
> > Subject: Re: [hlds_linux] NET_GetLong attacks
> >
> > Yes, it was mentioned on the other thread titled "steam server ports."
> >
> > http://forums.alliedmods.net/showthread.php?t=151551
> >
> > The 4th section from the top is dealing with attacks like this.
> >
> > ----- Original Message -----
> > From: "Michael Johansen" <michs...@live.no>
> > To: "Half-Life dedicated Linux server mailing list"
> > <hlds_linux@list.valvesoftware.com>
> > Sent: Monday, September 02, 2013 2:38 AM
> > Subject: Re: [hlds_linux] NET_GetLong attacks
> >
> >
> > > Is it possible to stop this attack using iptables? Usually using the
> > > "Valve-way" of stopping the attacks won't work very well.
> > >> Date: Sun, 1 Sep 2013 23:45:23 -0400
> > >> From: violentcri...@convictgaming.com
> > >> To: hlds_linux@list.valvesoftware.com
> > >> Subject: Re: [hlds_linux] NET_GetLong attacks
> > >>
> > >> That might have worked with the other filtering we are doing. If it
> does
> > >> I will send you the money. Send me a private email with your steam
> user.
> > >>
> > >>
> > >> On 9/1/2013 11:11 PM, Bottiger wrote:
> > >> > If you used the version I posted it should not have set your
> > >> > sv_max_queries_sec_global
> > >> > so high.
> > >> >
> > >> > You are supposed to lower that number until it becomes playable and
> > >> > raise
> > >> > the window.
> > >> >
> > >> >
> > >
> > > _______________________________________________
> > > To unsubscribe, edit your list preferences, or view the list archives,
> > > please visit:
> > > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
> >
> >
> > _______________________________________________
> > To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
>
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux

Reply via email to