[guven5]

in the last week i got 3 different attack with that way, someone doing a fast retry and server down to lag (badly), nick change after every retry...

is this a new style attack or a known thing and i am noob i dont know that bug.... attack came from 3 different countries and so some people know and use that.


who know that attack and any solution ?

[mabaclu]

Is your server non-steam?

[Y060N]

Sounds like a DoS attack, sending UDP packets to your server. Ban the IP range it comes from.

[guven5]

Originally Posted by Y060N Sounds like a DoS attack, sending UDP packets to your server. Ban the IP range it comes from.

yeah i just do that but where to... every attack came from different countries, and that attack looks like different than dos attack, too many fast retry.

[Y060N]

UDP packets are disguised as fakeplayers that look like they are entering your server but really are not. I'd just say it's a large shelled attacked.

[guven5]

Originally Posted by Y060N UDP packets are disguised as fakeplayers that look like they are entering your server but really are not. I'd just say it's a large shelled attacked.

i use a Linux vds and i have 2 firewalls in my sytem and blocks all tcp/udp attacks
also i have lates steam update... that atatck new something and you see more people come for that complaint.

[pillepallus]

limit connections and drop spam pakets... iptables can do that. many attacks will fail.

i.e.

iptables -A INPUT -p tcp --destination-port 27015 -m length --length 0:32 -j LOG --log-prefix "SRCDS-XSQUERY " --log-ip-options -m limit --limit 1/m --limit-burst 1
iptables -A INPUT -p tcp --destination-port 27015 -m length --length 0:32 -j DROP

many threads already exists here. copy and paste to google. u will find some good

[pillepallus]

Originally Posted by guven5 i use a Linux vds and i have 2 firewalls in my sytem and blocks all tcp/udp attacks also i have lates steam update... that atatck new something and you see more people come for that complaint.

how many firefalls? for gaming? useless in most of cases... paketfilter iptables will solve like 95 percent of ur problems

[guven5]

The problem is not firewall or tcp/udp packages
firewall for multiple attack or more pro attacks, like botnet attacks or proxylist atatck

firewall stops % 95 of attacks, yes and + ip table rules or ip range ban


my problem is not firewall, i am talking about a different attack doing by a script... that is a new something

[Baghi]

New Jo's exploit 3 is here! Run hldsupdatetool as quickly as possible.
OR

iptables -I INPUT -p udp -m udp --dport 27642 -m length --length 222 -m string --algo bm --hex-string "|a090 9090 9090 9090 9018 09a5 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000|" -j DROP