AlliedModders

AlliedModders (https://forums.alliedmods.net/index.php)
-   Source Servers (SRCDS) (https://forums.alliedmods.net/forumdisplay.php?f=130)
-   -   Help stopping DoS attack Ubuntu 16.04 (https://forums.alliedmods.net/showthread.php?t=310585)

Santi. 09-10-2018 22:20

Help stopping DoS attack Ubuntu 16.04
 
Hi, Does anyone know how to stop DoS attacks? Have you any good tutorial?

We're having a lot of problems 'cause of brazilians :/

VPPGamingNetwork 09-10-2018 22:23

Re: Help stopping DoS attack Ubuntu 16.04
 
get a host with good ddos protection, but that might be very expensive depending on your location

Santi. 09-10-2018 22:25

Re: Help stopping DoS attack Ubuntu 16.04
 
Quote:

Originally Posted by VPPGamingNetwork (Post 2614628)
get a host with good ddos protection, but that might be very expensive depending on your location

Right, but it's no DDoS, it's DoS, so I don't know very well how to use iptables to limit the connections from some potential attacker

PerfectLaugh 09-10-2018 23:16

Re: Help stopping DoS attack Ubuntu 16.04
 
Did you have wireshark pcap file on that server?

lugui 09-19-2018 08:42

Re: Help stopping DoS attack Ubuntu 16.04
 
sudo iptables -t nat -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 15 --connlimit-mask 32 --connlimit-saddr -j DROP
sudo iptables -t nat -A INPUT -p udp -m connlimit --connlimit-above 15 --connlimit-mask 32 --connlimit-saddr -j DROP

Run this. It will drop any IP that makes more than 15 conections (you can lower it if you want)

sphinx 09-23-2018 03:10

Re: Help stopping DoS attack Ubuntu 16.04
 
Quote:

Originally Posted by lugui (Post 2615832)
sudo iptables -t nat -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 15 --connlimit-mask 32 --connlimit-saddr -j DROP
sudo iptables -t nat -A INPUT -p udp -m connlimit --connlimit-above 15 --connlimit-mask 32 --connlimit-saddr -j DROP

Run this. It will drop any IP that makes more than 15 conections (you can lower it if you want)

this works only if the flood comes from the same ip address (which is a very rare case), but not for ddos flood, which can be mitigated only upstream.

e54385991 09-23-2018 09:46

Re: Help stopping DoS attack Ubuntu 16.04
 
No way to defend udp spoofing (faked ip)
apart from white ip list

TheHap 09-23-2018 12:43

Re: Help stopping DoS attack Ubuntu 16.04
 
hello,

send me log i help you.

Puppetmaster 09-26-2018 18:07

Re: Help stopping DoS attack Ubuntu 16.04
 
Quote:

Originally Posted by e54385991 (Post 2616443)
No way to defend udp spoofing (faked ip)
apart from white ip list

Unfortunately this is the answer.

There are definitely more robust systems out there in other games such as the one which ARK Survival uses where it uses a steam relay. The downside is that it adds additional latency.


All times are GMT -4. The time now is 09:16.

Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.