Re: [hlds] TF2 repeatable crash exploit posted to the forums

2009-10-29 Thread Ketil A

Called a soft delete, common on vB forums. Which the steam forums happen to be.
Of cource it could also be moved, but we don't know that

> From: m4ngr...@gmail.com
> To: hlds@list.valvesoftware.com
> Date: Fri, 30 Oct 2009 09:05:06 +1100
> Subject: Re: [hlds] TF2 repeatable crash exploit posted to the forums
> 
> It wasn't deleted, it was just moved to a non-public forum. Hence:
> 
> , you do not have permission to access this page. This could be
> due to one of several reasons:
> 
>1. Your user account may not have sufficient privileges to access this
> page. Are you trying to edit someone else's post, access administrative
> features or some other privileged system?
>2. If you are trying to post, the administrator may have disabled your
> account, or it may be awaiting activation.
> 
> 
> -Original Message-
> From: hlds-boun...@list.valvesoftware.com
> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Ketil A
> Sent: Friday, 30 October 2009 5:21 AM
> To: hlds@list.valvesoftware.com
> Subject: Re: [hlds] TF2 repeatable crash exploit posted to the forums
> 
> 
> You can't access it because it got deleted
> 
> > From: saul.renni...@gmail.com
> > Date: Thu, 29 Oct 2009 18:17:29 +
> > To: hlds@list.valvesoftware.com
> > Subject: Re: [hlds] TF2 repeatable crash exploit posted to the forums
> > 
> > Same.
> > 
> > Thanks,
> > - Saul.
> > 
> > 
> > 2009/10/29 Andre Coelho 
> > 
> > > Can you please post here teh forum content?
> > > I'm unable to access the forum now.
> > >
> > > André Coelho
> > > Cel. +5521 8836.7622
> > > DClick Web & Mobile Solutions
> > >
> > > LinkedIn: http://www.linkedin.com/in/andrebrait
> > >
> > >
> > > On Thu, Oct 29, 2009 at 4:04 PM, Phillip Vector  > > >wrote:
> > >
> > > > I tried out what the forums said and it didn't work. It dropped a
> > > > heavy without hands, yes. But it didn't crash the server.
> > > >
> > > > On Thu, Oct 29, 2009 at 11:01 AM, Shawn Somers
> 
> > > > wrote:
> > > > > The post is (as of right now) 40 minutes old. Making sure that a
> VALVe
> > > > > employee knows about it, as well as the people that actually operate
> > > the
> > > > > servers, just seems like a good idea to Me.
> > > > >
> > > > > Shawn Somers
> > > > >
> > > > > Phillip Vector wrote:
> > > > >> Thank you for bringing even MORE attention to it.
> > > > >>
> > > > >> On Thu, Oct 29, 2009 at 10:51 AM, Shawn Somers <
> > > shawn.som...@gmail.com>
> > > > wrote:
> > > > >>> This needs fixed ASAP!
> > > > >>>
> > > > >>> http://forums.steampowered.com/forums/showthread.php?t=1004137
> > > > >>>
> > > > >>> Shawn Somers
> > > > >
> > > > > ___
> > > > > To unsubscribe, edit your list preferences, or view the list
> archives,
> > > > please visit:
> > > > > http://list.valvesoftware.com/mailman/listinfo/hlds
> > > > >
> > > > >
> > > >
> > > > ___
> > > > To unsubscribe, edit your list preferences, or view the list archives,
> > > > please visit:
> > > > http://list.valvesoftware.com/mailman/listinfo/hlds
> > > >
> > > ___
> > > To unsubscribe, edit your list preferences, or view the list archives,
> > > please visit:
> > > http://list.valvesoftware.com/mailman/listinfo/hlds
> > >
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds
> 
> _
> New Windows 7: Simplify what you do everyday. Find the right PC for you.
> http://www.microsoft.com/uk/windows/buy/
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>  
> 
> __ Information from ESET Smart Security, version of virus signature
> database 4556 (20091029) __
> 
> The message was checked by ESET Smart Security.
> 
> http://www.eset.com
>  
>  
> 
> __ Information from ESET Smart Security, version of virus signature
> database 4556 (20091029) __
> 
> The message was checked by ESET Smart Security.
> 
> http://www.eset.com
>  
> 
> 
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
  
_
Download Messenger onto your mobile for free
http://clk.atdmt.com/UKM/go/174426567/direct/01/
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] TF2 repeatable crash exploit posted to the forums

2009-10-29 Thread Ketil A

You can't access it because it got deleted

> From: saul.renni...@gmail.com
> Date: Thu, 29 Oct 2009 18:17:29 +
> To: hlds@list.valvesoftware.com
> Subject: Re: [hlds] TF2 repeatable crash exploit posted to the forums
> 
> Same.
> 
> Thanks,
> - Saul.
> 
> 
> 2009/10/29 Andre Coelho 
> 
> > Can you please post here teh forum content?
> > I'm unable to access the forum now.
> >
> > André Coelho
> > Cel. +5521 8836.7622
> > DClick Web & Mobile Solutions
> >
> > LinkedIn: http://www.linkedin.com/in/andrebrait
> >
> >
> > On Thu, Oct 29, 2009 at 4:04 PM, Phillip Vector  > >wrote:
> >
> > > I tried out what the forums said and it didn't work. It dropped a
> > > heavy without hands, yes. But it didn't crash the server.
> > >
> > > On Thu, Oct 29, 2009 at 11:01 AM, Shawn Somers 
> > > wrote:
> > > > The post is (as of right now) 40 minutes old. Making sure that a VALVe
> > > > employee knows about it, as well as the people that actually operate
> > the
> > > > servers, just seems like a good idea to Me.
> > > >
> > > > Shawn Somers
> > > >
> > > > Phillip Vector wrote:
> > > >> Thank you for bringing even MORE attention to it.
> > > >>
> > > >> On Thu, Oct 29, 2009 at 10:51 AM, Shawn Somers <
> > shawn.som...@gmail.com>
> > > wrote:
> > > >>> This needs fixed ASAP!
> > > >>>
> > > >>> http://forums.steampowered.com/forums/showthread.php?t=1004137
> > > >>>
> > > >>> Shawn Somers
> > > >
> > > > ___
> > > > To unsubscribe, edit your list preferences, or view the list archives,
> > > please visit:
> > > > http://list.valvesoftware.com/mailman/listinfo/hlds
> > > >
> > > >
> > >
> > > ___
> > > To unsubscribe, edit your list preferences, or view the list archives,
> > > please visit:
> > > http://list.valvesoftware.com/mailman/listinfo/hlds
> > >
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> > please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds
> >
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
  
_
New Windows 7: Simplify what you do everyday. Find the right PC for you.
http://www.microsoft.com/uk/windows/buy/
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] TF2 DDOS AS2_INFO attack

2009-09-05 Thread Ketil A

My groups webserver is back up aswell as all the gameservers not on port 27015, 
Changed to port 27016 as a temporarily fix
Hope the attacker gets tired soon, almost impossible to get all the regulars to 
update their favs with the new port

> From: kenny.logg...@clanao.com
> To: hlds@list.valvesoftware.com
> Date: Sat, 5 Sep 2009 13:47:44 -0500
> Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> 
> It's more like this guy it breaking the law and if its across state lines I
> believe this could be a felony but I'm not sure. I would hope that most ISP
> would be willing to help out.
> 
> -Original Message-
> From: hlds-boun...@list.valvesoftware.com
> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Shane Arnold
> Sent: Saturday, September 05, 2009 1:46 PM
> To: Half-Life dedicated Win32 server mailing list
> Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> 
> How many packets, let alone routed IPs, do you think pass through even 
> just one router on an ISP backbone. 80k packets in 5 minutes is so 
> ridiculously small it wouldn't even warrant a raised eyebrow.
> 
> Best thing to do with DDoS'ers is wait till they get bored and move on.
> 
> Kenny Loggins wrote:
> > This guys ISP has to know dam well what he's doing. Its not had to see
> that
> > packets that leave your network originate from IP's that are not even on
> > your network. Maybe we need to track down the ISP and go after him..
> > 
> > -Original Message-
> > From: hlds-boun...@list.valvesoftware.com
> > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Claudio Beretta
> > Sent: Saturday, September 05, 2009 12:57 PM
> > To: Half-Life dedicated Win32 server mailing list
> > Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> > 
> > Or someone willing to take down a server.. and taking down other
> > random ones just to avoid giving away his intentions.
> > When did this attack started on your server? On mine it started at 4PM
> > CEST (2PM UTC)
> > 
> > BTW, this guy must be using spoofed addresses, since I'm being hit by
> > approx 8 AS2_INFO requests every 5 minutes from unique IP
> > addresses.
> > 
> > 
> > On Sat, Sep 5, 2009 at 7:25 PM, Kenny Loggins
> > wrote:
> >> Same here he's hitting one of my server also... I'm up for painting the
> >> wall's red with this guy when I find him... My guess is some new
> >> inexperienced server admin looking to take down the poplar servers so he
> > can
> >> get people into his server... He'll make some good red paint!
> >>
> >>
> >> -Original Message-
> >> From: hlds-boun...@list.valvesoftware.com
> >> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Garry Ilverz
> >> Sent: Saturday, September 05, 2009 11:30 AM
> >> To: Half-Life dedicated Win32 server mailing list
> >> Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> >>
> >> My server is also under this type of attack.. So Valve hasnt fixed it ..
> > Or
> >> it is some new exploit. sv_max_queries_sec_global 1 doesnt help. Server's
> >> fps is still dropping and its lagging like hell :(
> >>
> >> On Sat, Sep 5, 2009 at 7:23 PM, Saul Rennison
> >> wrote:
> >>
> >>> sv_max_queries_sec_global 1?
> >>>
> >>> Will make your server appear unresponsive to the Server Browser while
> >> being
> >>> DDoS'd but saves the lag.
> >>>
> >>> Thanks,
> >>> - Saul.
> >>>
> > 
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> > please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds
> > 
> > 
> > 
> > ___
> > To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> > http://list.valvesoftware.com/mailman/listinfo/hlds
> 
> 
> 
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
> 
> 
> 
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds

_
Learn how to add other email accounts to Hotmail in 3 easy steps.
http://clk.atdmt.com/UKM/go/167688463/direct/01/
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


[hlds] TF2 DDOS AS2_INFO attack

2009-09-05 Thread Ketil A

My server group is under attack aswell, all our tf2 servers + our 1 left 4 dead 
server is down aswell as our seperate webserver
The attack started around 4-5 hours ago with only a couple of the gameservers 
which we then changed the port of after we failed at blocking it. 
Then around 2 hours ago our webserver started to lag and then 1 hour ago the 
webserver aswell as all the gameservers went down.
May be the same guy that tried to attack us some weeks ago where we ended up 
blocking TCP 27015 and using a whitelist for those that needed to use rcon
which stopped him for a while

> From: kenny.logg...@clanao.com
> To: hlds@list.valvesoftware.com
> Date: Sat, 5 Sep 2009 13:23:16 -0500
> Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> 
> Few of us have been dealing with this guy for awhile now. I think he started
> on my server at about 8:30am cst and I have really had it with this guy..
> I'm willing to drive or fly anywhere and this guy should pray that I never
> find him because I'd be going to jail shortly after our confrontation.
> 
> -Original Message-
> From: hlds-boun...@list.valvesoftware.com
> [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Claudio Beretta
> Sent: Saturday, September 05, 2009 12:57 PM
> To: Half-Life dedicated Win32 server mailing list
> Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> 
> Or someone willing to take down a server.. and taking down other
> random ones just to avoid giving away his intentions.
> When did this attack started on your server? On mine it started at 4PM
> CEST (2PM UTC)
> 
> BTW, this guy must be using spoofed addresses, since I'm being hit by
> approx 8 AS2_INFO requests every 5 minutes from unique IP
> addresses.
> 
> 
> On Sat, Sep 5, 2009 at 7:25 PM, Kenny Loggins
> wrote:
> > Same here he's hitting one of my server also... I'm up for painting the
> > wall's red with this guy when I find him... My guess is some new
> > inexperienced server admin looking to take down the poplar servers so he
> can
> > get people into his server... He'll make some good red paint!
> >
> >
> > -Original Message-
> > From: hlds-boun...@list.valvesoftware.com
> > [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Garry Ilverz
> > Sent: Saturday, September 05, 2009 11:30 AM
> > To: Half-Life dedicated Win32 server mailing list
> > Subject: Re: [hlds] TF2 DDOS AS2_INFO attack
> >
> > My server is also under this type of attack.. So Valve hasnt fixed it ..
> Or
> > it is some new exploit. sv_max_queries_sec_global 1 doesnt help. Server's
> > fps is still dropping and its lagging like hell :(
> >
> > On Sat, Sep 5, 2009 at 7:23 PM, Saul Rennison
> > wrote:
> >
> >> sv_max_queries_sec_global 1?
> >>
> >> Will make your server appear unresponsive to the Server Browser while
> > being
> >> DDoS'd but saves the lag.
> >>
> >> Thanks,
> >> - Saul.
> >>
> 
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
> 
> 
> 
> ___
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds

_
Save time by using Hotmail to access your other email accounts.
http://clk.atdmt.com/UKM/go/167688463/direct/01/
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds