Quote:
Originally Posted by jldrake
Hello, we have been getting attacked for the past 2 days.
Do you know of any kind of fix for the following:
They all appear to be spoofed ips, They are causing a massive amount of lag.
Packet: Looks like Source Query
ffffffff54536f7572636520456e67696e65205175657 27900
If you know a fix let me know! Thank you!
|
There are two problems you have to deal with when it comes to this specific attack, the first is the denial of service caused by sending over 60 OOB packets per second. When that point is reached the engine will stop sending ANY OOB packets (including connect challenges) during that window. That's the first DoS which this plugin prevents.
The second problem is compounded by the fix for the first problem, which is that it replies to every A2S_INFO query. This floods the network and causes an increase in CPU usage and takes up network bandwidth (backscatter).
The solution would be a rather simple QoS system, giving game packets priority over OOB packets. This would give the least amount of impact to the players in game, and since OOB packets don't need to be recieved right away they can take a much lower priority.