[preepunk]

some nasty players are breaking my server

they are sending some kind of spam
i can see in console
NET_QueuePacket: Oversize packet from 1.2.3.4
if i addip 0 this 1.2.3.4 - the spam stops
but ips are different

can anyone suggest me a code so orphey will catch this message
NET_QueuePacket: Oversize packet from
and return ip as a string so i can ban it forever.

ps i tried to modify this
https://forums.alliedmods.net/showpo...07&postcount=2
but no use

thanks!

[Arkshine]

Sounds not too hard. Will try later.

[Clauu]

Originally Posted by Arkshine Sounds not too hard. Will try later.

Can you please? It can be something separated from orpheu module like a amxmodx plugin .. now this is the new way to hammer servers

[Arkshine]

#include <amxmodx>
#include <orpheu>

new OrpheuFunction:HandleFuncNETQueuePacket;
new OrpheuFunction:HandleFuncConPrintf;

new OrpheuHook:HandleHookConPrintf;

public plugin_init()
{
    register_plugin( "Ban NET Packet Spammer", "1.0.1", "Arkshine" );
    
    HandleFuncNETQueuePacket = OrpheuGetFunction( "NET_QueuePacket" );
    HandleFuncConPrintf      = OrpheuGetFunction( "Con_Printf" );
    
    OrpheuRegisterHook( HandleFuncNETQueuePacket, "NET_QueuePacket_Pre", OrpheuHookPre );
    OrpheuRegisterHook( HandleFuncNETQueuePacket, "NET_QueuePacket_Post", OrpheuHookPost );
}   

public NET_QueuePacket_Pre()
{
    HandleHookConPrintf = OrpheuRegisterHook( HandleFuncConPrintf, "Con_Printf" );
}

public Con_Printf( const fmt[], const arg[] )
{
    static const message[] = "Oversize packet from ";
    
    if( contain( fmt, message ) >= 0 )
    {
        new ip[ 16 ], i, c;
        
        while( i < charsmax( ip ) && ( c = fmt[ i + charsmax( message ) ] ) && c != ':' ) 
        { 
            ip[ i++ ] = c; 
        }   
        
        ip[ i ] = EOS;

        log_to_file( "NET_Packet_Spammer.log", "Blocking %s", ip );
        
        server_cmd( "addip 0 ^"%s^"", ip );
        server_exec();
    }
}

public NET_QueuePacket_Post()
{
    OrpheuUnregisterHook( HandleHookConPrintf );
}

[preepunk]

Now im waiting for the attack, I will say if it works or not.
Thank you!
Спасибо!

[Clauu]

It can be done without the orpheu module?

[Arkshine]

What's wrong using Orpheu ? Tell me, and please don't say "because I don't want to add another module", it's really a bullshit.

It exists a way, but not worth because inefficient and would hang up your server.
by enabling condebug (command), it generates a file named "qconsole" in hlds/. All the messages using Con_Printf() will be printed there, including the message wanted. So a poor, inefficient and not worth method would be to parse the whole file searching for this message. So you would need to parse all the time each x seconds. It will generate constant lags.

[Clauu]

Ok, thanks for your heavy arguments.

[katna]

ty, how can i test the explot to see if it still works?

[bibu]

Make a log text when you're banning the player.