[indraraj striker]

CSF
Which ports are in use for basic cs 1.6 server and necessary to open?
consider i am having apache too in vps and i am using winscp [SFTP] to access server file

TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,99 5" TCP_OUT = "20,21,22,25,53,80,110,113,443,587,993,99 5" UDP_IN = "20,21,53" UDP_OUT = "20,21,53,113,123"

how many hit count should i add ?

PORTFLOOD = “port;protocol;hit_count;interval_in_sec onds” PORTFLOOD = “80;tcp;50;10”

Connection Limit Protection

CONNLIMIT = “port;limit” CONNLIMIT = "80;10,21;2"

Can anyone give me his csf.conf file
Thanks

[aron9forever]

I added port 27015 to 28015 UDP since I wasn't sure what ports client connect on or if it's even needed and it works fine

can't remember the dos protection setting

[indraraj striker]

Originally Posted by aron9forever I added port 27015 to 28015 UDP since I wasn't sure what ports client connect on or if it's even needed and it works fine can't remember the dos protection setting

how to set range ?

[aron9forever]

UDP_IN = "20,21,53,27015:28015" as example for port range, just add the last part no need to replace the whole thing
UDP_OUT = "20,21,53,113,123,334343523,27015:28015"

here's the flood settings I use which seem to work fine on a machine with several hlds server on it
it also stopped an ongoing DOS attack (some split packet bullshit)

CONNLIMIT = "27015;5"
I guess you wouldn't have more than 5 players from the same address

PORTFLOOD = "27015;udp;5;10"
nobody should connect more than 5 connections in 10 seconds, otherwise they get blocked for 10 seconds

[indraraj striker]

aron9forever Thanks a lot.
one question should i remove this as game uses UDP i don't think all ports required for basic server

TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,99 3,99 5" TCP_OUT = "20,21,22,25,53,80,110,113,443,587,993,99 5"

[fysiks]

Many ports have specific purposes: 20/21 = FTP, 22 = SSH/SFTP, 80 = HTTP, 443 = HTTPS, etc.

If you don't need any of them you can remove them. Granted, if you are hosting your server at home, your primary router should have all of this stuff blocked and you would only route the ones you need.

[indraraj striker]

fysiks Thanks a lot.