[wolvez04]

Originally Posted by pakgamerz just get an OVH GAME Firewall.

I have an ovh game firewall and it doesn't protect against this (windows)

[Fluxxx]

Originally Posted by wolvez04 I have an ovh game firewall and it doesn't protect against this (windows)

The source engine query packet is not required to connect to the server. That packet is a query packet, it is required to see the server on the server listing. Rules should be set when an attack is detected, they don't need to be on 24/7. Rate limiting is the better option, but if you have no way to rate-limit upstream (eg. the mitigation hardware doesn't support it) then dropping all query packets while the server is under attack will be fine. It will prevent new players from joining from the server list, but it will avoid the game server going down entirely and kicking all the players. Rate-limiting can be done upstream and should be done upstream to avoid any interrupts caused by the hardware NIC during the query attacks but OVH doesn't seem to support this, as well as NFO. I talked to NFO about it and their staff is clueless, as many times i told them to just message Internap to get this filtered.

[wolvez04]

Originally Posted by Fluxxx The source engine query packet is not required to connect to the server. That packet is a query packet, it is required to see the server on the server listing. Rules should be set when an attack is detected, they don't need to be on 24/7. Rate limiting is the better option, but if you have no way to rate-limit upstream (eg. the mitigation hardware doesn't support it) then dropping all query packets while the server is under attack will be fine. It will prevent new players from joining from the server list, but it will avoid the game server going down entirely and kicking all the players. Rate-limiting can be done upstream and should be done upstream to avoid any interrupts caused by the hardware NIC during the query attacks but OVH doesn't seem to support this, as well as NFO. I talked to NFO about it and their staff is clueless, as many times i told them to just message Internap to get this filtered.

Rate limiting and blocking out players is not an option as I've been getting attacked 24/7 for 5 days now. Luckily they are dumb enough to not realise that I changed port temporally until I can somehow prevent it. They are still attacking that same port though.. over 300 individual IPs. OVH has given up trying to help

[wolvez04]

Sorry I didn't want to do this but I'll pay $100 USD to anyone who can fix this by tweaking my Windows Firewall or OVH Game Firewall. Kinda running out of options as this attack has been going for almost a week 24/7 and no signs of stopping.

[Neuro Toxin]

U cant simply fix a high level attack.

U must have really pissed someone off lmao.

[wolvez04]

Originally Posted by Neuro Toxin U cant simply fix a high level attack. U must have really pissed someone off lmao.

I disagree and I don't think I've pissed anyone off. Generally someone would continue to attack considering the server is so vulnerable and the attack is actually has a noticable effect, so why stop. If you can't beat them? DDOS them? This is very much fixable. I have game servers hosts which completely block this from even appearing in console. And another host who has managed to block it making the attack ineffective yet OVH in unable to filter this therefor resulting in constant server crashes.

[sphinx]

Originally Posted by Ejziponken Crashes for me too.

it works.

Listing 6 plugins:
           [01] Query Cache 2 (1.0.0.1) by Hashira
           [02] SourceMod (1.8.0.6040) by AlliedModders LLC
           [03] CS Tools (1.8.0.6040) by AlliedModders LLC
           [04] SDK Tools (1.8.0.6040) by AlliedModders LLC
           [05] SDK Hooks (1.8.0.6040) by AlliedModders LLC
           [06] SteamWorks Extension (1.2) by Kyle Sanderson

[nguyenbaodanh]

how about Query Cache 2 (1.0.0.1) for windows servers where to get it ?

[wolvez04]

Does anyone know why this lag effects only some players in the server and not everyone?

[asdfxD]

since today the "query cache" is crashing for me. it was working fine and i did not change anything on the server @linux.