Hi mates
I'm here again to report more attacks on my TF2 servers. A few weeks ago, I was suffering DOS attacks. These attacks were damaging all servers in same machine. So, I changed the host and these attacks stopped. (Thank God)
But now, I think my servers are getting different attacks, I guess is some exploit or something like that.
First: The server doesn't get lag. We are playing normally, and then the server suddenly stops. This stop is like a "freeze". The server freeze for 40 ~ 60 seconds, after this time the server become online again but all players disconnect from server, need connect again. If I have not been very clear, let me explain by HLSW.
a. Second 1 - We are playing with 50 ping
b. Second 2 - The server get timeout in hlsw ( 50 to timeout - don't get high or instable ping)
c. second 12 - The server continues timeout
d. second 22 - The server continues timeout
e. second 32 - The server continues timeout
f. second 42 - The server back online again with 50 ping. ( timeout to ping 50 - don't get higt or instable ping )
After this freeze, the server back at the same map ( so is not a crash, because don't back to "start map" ). When it's back, appear 32 players, after go to 22, after 16.. A lot of lost connections.
Why I think is attack?
1. Because my server #01 get this freeze, and after 2 minutes my server #02 get this freeze too.
2. My dedicated is dual quad core 2.83 ghz, 16 RAM, 100 Mbit, Linux CentOS.
3. At the exact moment that the servers froze, looked at the machine and everything was in order.
4. I'm hosted on this machine since last Saturday, never happened this before. Happend yesterday on my server #02, and today happend in both servers ( First on server #01 and after 2 minutes on server #02 ).
5. Others servers in same machine (CSS) run like a charm while my TF2 was getting freeze.
I'm pretty sure that is attacks by the 'Reason 1'... But, maybe I could be wrong? Maybe is not attack is a machine problem? Maybe is my plugins and extensions? Please tell me what sould do.
I'm running KAC and DAF as protection. Now I installed [VSP] Anti-flood plugin "Serversecure" until I get help from other members. Maybe this will solve my problem? I saw D-FENS but a member said that Anti-flood plugin Serversecure is better.. so...
My config:
PHP Code:
plugin_print
0:<TAB>" "Server Secure" "
1:<TAB>"Metamod:Source 1.8.6-dev"
2:<TAB>"DoS Attack Fixer, www.sourceop.com"
meta version
Metamod:Source version 1.8.6-dev
Build ID: 756:f0aa7238d72c-dev
Loaded As: Valve Server Plugin
Compiled on: Jan 12 2011
Plugin interface version: 15:14
SourceHook version: 5:5
http://www.metamodsource.net/
meta list
Listing 4 plugins:
[01] SourceMod (1.3.7-dev) by AlliedModders LLC
[02] TF2 Tools (1.3.7-dev) by AlliedModders LLC
[03] BinTools (1.3.7-dev) by AlliedModders LLC
[04] SDK Tools (1.3.7-dev) by AlliedModders LLC
sm version
SourceMod Version: 1.3.7-dev
SourcePawn Engine: SourcePawn 1.1, jit-x86 (build 1.3.7-dev)
SourcePawn API: v1 = 4, v2 = 3
Compiled on: Jan 16 2011 20:37:07
Build ID: 3092:c13788be3c6f-dev
http://www.sourcemod.net/
sm plugins list
Listing 25 plugins:
01 "Fun Votes" (1.3.7-dev) by AlliedModders LLC
02 "Nextmap" (1.3.7-dev) by AlliedModders LLC
03 "Client Preferences" (1.3.7-dev) by AlliedModders LLC
04 "CBaseServer Ext Basic Reserve Slots" by predfoot winkerbottom
05 "Basic Commands" (1.3.7-dev) by AlliedModders LLC
06 "Kigen's Anti-Cheat" (1.2.1.6) by CodingDirect LLC
07 "Basic Comm Control" (1.3.7-dev) by AlliedModders LLC
08 "Player Commands" (1.3.7-dev) by AlliedModders LLC
09 "High Ping Kicker - Lite Edition" (1.0.0.1) by Liam
10 "Basic Votes" (1.3.7-dev) by AlliedModders LLC
11 "MapChooser" (1.3.7-dev) by AlliedModders LLC
12 "Sound Commands" (1.3.7-dev) by AlliedModders LLC
13 "Admin Menu" (1.3.7-dev) by AlliedModders LLC
14 "Basic Chat" (1.3.7-dev) by AlliedModders LLC
15 "Basic Ban Commands" (1.3.7-dev) by AlliedModders LLC
16 "Admin Help" (1.3.7-dev) by AlliedModders LLC
17 "Rock The Vote" (1.3.7-dev) by AlliedModders LLC
18 "Advertisements" (0.5.5) by Tsunami
19 "AFK Manager" (3.3.0) by Rothgar
20 "Admin File Reader" (1.3.7-dev) by AlliedModders LLC
21 "Reserved Slots" (1.3.7-dev) by AlliedModders LLC
22 "Fun Commands" (1.3.7-dev) by AlliedModders LLC
23 "Basic Info Triggers" (1.3.7-dev) by AlliedModders LLC
24 "Map Nominations" (1.3.7-dev) by AlliedModders LLC
25 "Anti-Flood" (1.3.7-dev) by AlliedModders LLC
sm exts list
[SM] Displaying 11 extensions:
[01] Automatic Updater (1.3.7-dev): Updates SourceMod gamedata files
[02] Webternet (1.3.7-dev): Extension for interacting with URLs
[03] CBaseServer tools (1.1.0.0): Base server tools (and example of detours)
[04] TF2 Tools (1.3.7-dev): TF2 extended functionality
[05] BinTools (1.3.7-dev): Low-level C/C++ Calling API
[06] SDK Tools (1.3.7-dev): Source SDK Tools
[07] Top Menus (1.3.7-dev): Creates sorted nested menus
[08] Client Preferences (1.3.7-dev): Saves client preference settings
[09] SQLite (1.3.7-dev): SQLite Driver
[10] <FAILED> file "sdkhooks.ext.so": /home/tf27016/orangebox/tf/addons/sourcemod/extensions/sdkhooks.ext.so: cannot open shared object file: No such file or directory
[11] Socket (3.0.1alpha): Socket extension for SourceMod
PS: I don't use SDK HOOKS and KAC get an error about Didn't find this extension, is optional.
So, these are all my informations. I really need help.
Thanks