[guven5]

Server cvar "max_queries_sec" = "***PROTECTED***"
Server cvar "max_queries_window" = "***PROTECTED***"


you cvar commands may be can reduce replay but what is that "PROTECTED"


also how to disable "FF FF FF FF" with iptables

Originally Posted by asherkin If your server is updated and you aren't using dproto, the issue is already solved.

i have steam servers... also upto date, but still probem... smaller yes but somethings also depend attack parameters....

[YamiKaitou]

Update your server and you will not have to worry about this exploit.

[FiFiX]

Stable or beta?

[asherkin]

Originally Posted by FiFiX Stable or beta?

Stable, but it was an optional update.

Also, for people that still don't understand this, you can't do anything as the target of an attack - the fixes are for people who's servers are being used to source them.

[Zephyrus]

limiting number of max queries isnt a good protection either as the attacker can simply delist your server by exceeding that number

[FiFiX]

Originally Posted by asherkin Stable, but it was an optional update. Also, for people that still don't understand this, you can't do anything as the target of an attack - the fixes are for people who's servers are being used to source them.

And how to do that 'optional' update? Just -autoupdate?

Also, how can I now, which version of stable and which of beta is the newest? And is there any changelog for hlds?(linux)

[Powerlord]

Originally Posted by FiFiX And how to do that 'optional' update? Just -autoupdate?

Manually run hldsupdatetool (or ./steam on Linux) with the usual arguments (-command update -game cstrike -dir whatever)

Note: I used cstrike as an example, but cstrike likely needs the -hlbeta argument...

Originally Posted by FiFiX Also, how can I now, which version of stable and which of beta is the newest? And is there any changelog for hlds?(linux)

cstrike is the only game with an hlbeta currently going on. For all other games, use stable... it's newer.

[FiFiX]

Originally Posted by Powerlord cstrike is the only game with an hlbeta currently going on. For all other games, use stable... it's newer.

Is it going to change someday?
Thats better for me to use beta or stable for cstrike?

[mabaclu]

Use beta, otherwise people may crash your server.

[farenheitcx]

I check with

./steam -command update -game cstrike -dir . -beta hlbeta

But nothing happend, the message i received is "HLDS installation up to date"
Now I have the version "5758" for hlds server. Is that the latest version with the fix for this kind of attack?.