Re: [hlcoders] DoS Attack Fixer

[Busy orange]

1-2 mbit/s spaming with  large(4096 kb ) UDP packets. resulting hight ping
or timeout drop for clients.
Harry Jeffery
no matter, i can search in forum post DB or hlstatsx DB
DoS attacck fixer by Drunk
F00l
i
want make same plugin for me.

2009/12/16 Olly 

> Then it's probably an exploit of the networking code, and you should send
> the log to valve. Not a denial of service.
>
> 2009/12/16 Harry Jeffery 
>
> > I have an app that can bring down a server on a home connection. I
> > logged the packets and all it seems to do is send a few server
> > queries. When I replicated the queries it didn't work. No idea how the
> > program manages to kill the server with barely 2 queries a second but
> > it did.
> >
> > 2009/12/16 Olly :
> > > You'd need a better than residential connection to bring down a server.
> > > Unless the guy is playing though remote desktop to his server, I don't
> > think
> > > its gonna work ;o
> > >
> > > 2009/12/16 bl4nk 
> > >
> > >> That's why he said he wants to use a database to figure out which
> > >> SteamID was being used. If you log connections to your server, you
> could
> > >> easily connect an IP address to a SteamID (unless of course a proxy
> was
> > >> used, which is the case most of the time).
> > >>
> > >> Harry Jeffery wrote:
> > >> > DoS attacks generally use server queries. SteamID's are not sent.
> Only
> > >> > IP's can be detected and they cannot be connected to a specific
> steam
> > >> > account. All you can do is block the IP.
> > >> >
> > >> > 2009/12/15 Busy orange :
> > >> >
> > >> >> i want write same plugin for me. with one feature check db for
> match
> > (to
> > >> >> detect steamid player who attacks server)
> > >> >>
> > >> >> P.S. i hope D.F can help me :)
> > >> >> ___
> > >> >> To unsubscribe, edit your list preferences, or view the list
> > archives,
> > >> please visit:
> > >> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
> > >> >>
> > >> >>
> > >> >>
> > >> >
> > >> > ___
> > >> > To unsubscribe, edit your list preferences, or view the list
> archives,
> > >> please visit:
> > >> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> > >> >
> > >> >
> > >> >
> > >>
> > >>
> > >> ___
> > >> To unsubscribe, edit your list preferences, or view the list archives,
> > >> please visit:
> > >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
> > >>
> > >>
> > > ___
> > > To unsubscribe, edit your list preferences, or view the list archives,
> > please visit:
> > > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> > >
> > >
> >
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> > please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >
> >
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders

Re: [hlcoders] DoS Attack Fixer

[Olly]

Then it's probably an exploit of the networking code, and you should send
the log to valve. Not a denial of service.

2009/12/16 Harry Jeffery 

> I have an app that can bring down a server on a home connection. I
> logged the packets and all it seems to do is send a few server
> queries. When I replicated the queries it didn't work. No idea how the
> program manages to kill the server with barely 2 queries a second but
> it did.
>
> 2009/12/16 Olly :
> > You'd need a better than residential connection to bring down a server.
> > Unless the guy is playing though remote desktop to his server, I don't
> think
> > its gonna work ;o
> >
> > 2009/12/16 bl4nk 
> >
> >> That's why he said he wants to use a database to figure out which
> >> SteamID was being used. If you log connections to your server, you could
> >> easily connect an IP address to a SteamID (unless of course a proxy was
> >> used, which is the case most of the time).
> >>
> >> Harry Jeffery wrote:
> >> > DoS attacks generally use server queries. SteamID's are not sent. Only
> >> > IP's can be detected and they cannot be connected to a specific steam
> >> > account. All you can do is block the IP.
> >> >
> >> > 2009/12/15 Busy orange :
> >> >
> >> >> i want write same plugin for me. with one feature check db for match
> (to
> >> >> detect steamid player who attacks server)
> >> >>
> >> >> P.S. i hope D.F can help me :)
> >> >> ___
> >> >> To unsubscribe, edit your list preferences, or view the list
> archives,
> >> please visit:
> >> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >> >>
> >> >>
> >> >>
> >> >
> >> > ___
> >> > To unsubscribe, edit your list preferences, or view the list archives,
> >> please visit:
> >> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >> >
> >> >
> >> >
> >>
> >>
> >> ___
> >> To unsubscribe, edit your list preferences, or view the list archives,
> >> please visit:
> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >>
> >>
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >
> >
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders

Re: [hlcoders] DoS Attack Fixer

[Harry Jeffery]

I have an app that can bring down a server on a home connection. I
logged the packets and all it seems to do is send a few server
queries. When I replicated the queries it didn't work. No idea how the
program manages to kill the server with barely 2 queries a second but
it did.

2009/12/16 Olly :
> You'd need a better than residential connection to bring down a server.
> Unless the guy is playing though remote desktop to his server, I don't think
> its gonna work ;o
>
> 2009/12/16 bl4nk 
>
>> That's why he said he wants to use a database to figure out which
>> SteamID was being used. If you log connections to your server, you could
>> easily connect an IP address to a SteamID (unless of course a proxy was
>> used, which is the case most of the time).
>>
>> Harry Jeffery wrote:
>> > DoS attacks generally use server queries. SteamID's are not sent. Only
>> > IP's can be detected and they cannot be connected to a specific steam
>> > account. All you can do is block the IP.
>> >
>> > 2009/12/15 Busy orange :
>> >
>> >> i want write same plugin for me. with one feature check db for match (to
>> >> detect steamid player who attacks server)
>> >>
>> >> P.S. i hope D.F can help me :)
>> >> ___
>> >> To unsubscribe, edit your list preferences, or view the list archives,
>> please visit:
>> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>> >>
>> >>
>> >>
>> >
>> > ___
>> > To unsubscribe, edit your list preferences, or view the list archives,
>> please visit:
>> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
>> >
>> >
>> >
>>
>>
>> ___
>> To unsubscribe, edit your list preferences, or view the list archives,
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>>
>>
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders

Re: [hlcoders] DoS Attack Fixer

[Olly]

You'd need a better than residential connection to bring down a server.
Unless the guy is playing though remote desktop to his server, I don't think
its gonna work ;o

2009/12/16 bl4nk 

> That's why he said he wants to use a database to figure out which
> SteamID was being used. If you log connections to your server, you could
> easily connect an IP address to a SteamID (unless of course a proxy was
> used, which is the case most of the time).
>
> Harry Jeffery wrote:
> > DoS attacks generally use server queries. SteamID's are not sent. Only
> > IP's can be detected and they cannot be connected to a specific steam
> > account. All you can do is block the IP.
> >
> > 2009/12/15 Busy orange :
> >
> >> i want write same plugin for me. with one feature check db for match (to
> >> detect steamid player who attacks server)
> >>
> >> P.S. i hope D.F can help me :)
> >> ___
> >> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >>
> >>
> >>
> >
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlcoders
> >
> >
> >
>
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders

Re: [hlcoders] DoS Attack Fixer

[bl4nk]

That's why he said he wants to use a database to figure out which 
SteamID was being used. If you log connections to your server, you could 
easily connect an IP address to a SteamID (unless of course a proxy was 
used, which is the case most of the time).

Harry Jeffery wrote:
> DoS attacks generally use server queries. SteamID's are not sent. Only
> IP's can be detected and they cannot be connected to a specific steam
> account. All you can do is block the IP.
>
> 2009/12/15 Busy orange :
>   
>> i want write same plugin for me. with one feature check db for match (to
>> detect steamid player who attacks server)
>>
>> P.S. i hope D.F can help me :)
>> ___
>> To unsubscribe, edit your list preferences, or view the list archives, 
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>>
>>
>> 
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>
>   


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders

Re: [hlcoders] DoS Attack Fixer

[Harry Jeffery]

DoS attacks generally use server queries. SteamID's are not sent. Only
IP's can be detected and they cannot be connected to a specific steam
account. All you can do is block the IP.

2009/12/15 Busy orange :
> i want write same plugin for me. with one feature check db for match (to
> detect steamid player who attacks server)
>
> P.S. i hope D.F can help me :)
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlcoders
>
>

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlcoders