AlliedModders

AlliedModders (https://forums.alliedmods.net/index.php)
-   Source Servers (SRCDS) (https://forums.alliedmods.net/forumdisplay.php?f=130)
-   -   What type of attack is this? (https://forums.alliedmods.net/showthread.php?t=189101)

al1alu 07-03-2012 13:25

What type of attack is this?
 
The DAF 'intercepted' the attack, but lagged all the server (machine full)
I thought it was a udp flooder but it was something greater than 1 second attack paralyzed the entire machine.

Quote:

[07/02/12 119:33 PM] Blocked 174.224.36.12.
[07/02/12 11:93 PM] Blocked 112.162.134.88.
[07/02/12 11:39:33 PM] Blocked 80.124.127.59.
(and have more than 1000 lines - see all in http://pastebin.com/G5mvuMwJ)

al1alu 07-03-2012 13:28

Re: What type of attack is this?
 
Damn't wrong forum.
Please, somebody move to https://forums.alliedmods.net/forumdisplay.php?f=130

blue zebra 07-03-2012 13:40

Re: What type of attack is this?
 
This is a DOS attack. Don't worry. The DAF protect you. :D

Zephyrus 07-03-2012 14:19

Re: What type of attack is this?
 
Quote:

Originally Posted by blue zebra (Post 1742390)
This is a DOS attack. Don't worry. The DAF protect you. :D

not really, it came from shitload of ips, it was an actual ddos according to that log, it was just using an srcds packet to flood but thats it, without daf it would have even caused more cpu load

so daf wont protect you against that

al1alu 07-03-2012 15:11

Re: What type of attack is this?
 
Quote:

Originally Posted by Zephyrus (Post 1742414)
not really, it came from shitload of ips, it was an actual ddos according to that log, it was just using an srcds packet to flood but thats it, without daf it would have even caused more cpu load

so daf wont protect you against that

You're right, the DAF not protected.
When the attack began, all the server was unavailable, was an average of 52 players (after the last update) and I was not the only victim, and another had been the victim of other attacks, however, i can block the another attacks.
But from what I saw on the firewall of those same servers ping in my server a medium of 100kbytes in UDP.

Nolongerinthegame 07-03-2012 17:08

Re: What type of attack is this?
 
Quote:

Originally Posted by al1alu (Post 1742369)
The DAF 'intercepted' the attack, but lagged all the server (machine full)
I thought it was a udp flooder but it was something greater than 1 second attack paralyzed the entire machine.

Oh my god thats a huuge attack. Definitely ddos :(

al1alu 07-03-2012 22:55

Re: What type of attack is this?
 
Quote:

Originally Posted by nelioneil (Post 1742547)
Oh my god thats a huuge attack. Definitely ddos :(

Shi*t! :X
Any ideias to block?

I'm using this, but dont block.

Quote:

iptables -A INPUT -p udp -m length --length 2521:65535 -j DROP

Zephyrus 07-04-2012 02:26

Re: What type of attack is this?
 
You can't do anything against real ddos, while you are being hit you can null route the attack (redirect all packets to a loopback adapter) to prevent collateral dmg but that's it

al1alu 07-04-2012 11:21

Re: What type of attack is this?
 
Quote:

Originally Posted by Zephyrus (Post 1742925)
You can't do anything against real ddos, while you are being hit you can null route the attack (redirect all packets to a loopback adapter) to prevent collateral dmg but that's it

Any ideas to do this?
Thanks.

Zephyrus 07-04-2012 12:05

Re: What type of attack is this?
 
Quote:

Originally Posted by al1alu (Post 1743234)
Any ideas to do this?
Thanks.

http://en.wikipedia.org/wiki/Null_route


All times are GMT -4. The time now is 09:28.

Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.