[ottobohn]

I'm interested in creating a firewall for sourcemod. This will be flexible to prevent future attacks and DOS attacks.

Where do I start? What should I look at using? I'm willing to program this from scratch and load it with sourcemod.

Otto

[berni]

Let me ask, what does sourcemod have to do with it ?
A firewall isn't really something that is related to a gameserver anyway.

[danielkza]

If you think about, if the firewall is running on the game level, it won't be very useful, Sourcemod will still lag the server if it's processing tons of packets. The only effective way of protecting specific processes against attacks is at the OS level. iptables should take care of the job on Linux systems, but I don't know any equivalent tools for Windows though.

[koshmel]

4096 kb packets rulzz.
good way to DOS server

[SirLamer]

If you are running a server at home, just use the firewall in your router.

If you are renting a server, then you don't have any reason to worry about DOS attacks.

[terry0412x]

Yeah, since if you're renting, it's highly secure (most of the time) with tons of firewalls and proxy servers and probably with a high-class internet connection.
However, if you're running it on your own computer, be sure to download an anti-virus like AVG or Norton and enable the firewall for extra protection. You never know when hackers will strike.

[danielkza]

Originally Posted by terry0412x Yeah, since if you're renting, it's highly secure (most of the time) with tons of firewalls and proxy servers and probably with a high-class internet connection. However, if you're running it on your own computer, be sure to download an anti-virus like AVG or Norton and enable the firewall for extra protection. You never know when hackers will strike.

AVG and Norton both suck, AVG is slow like hell, takes 5 minutes to update, and it's in the far bottom of the detection charts.

For free Avira is your best choice, it's creates no noticeable slowdowns both in my current PC and in my old P4, and it has one of the best detection engines (although a little to sensitive). NOD32 and Karspersky are among the best too, if you're willing to pay for them.

Take a look at some tests here, and you can make your own decisions:
http://av-comparatives.org

[SirLamer]

I don't find that AVG is slow. In fact, I never even notice that is running. But whatever...

It's funny how new even seemingly equivalent things like antivirus software have fanboys.

[devicenull]

Write snort and/or iptables rules, don't rewrite one just for sourcemod.

[Cooltad]

Originally Posted by danielkza AVG and Norton both suck, AVG is slow like hell, takes 5 minutes to update, and it's in the far bottom of the detection charts. For free Avira is your best choice, it's creates no noticeable slowdowns both in my current PC and in my old P4, and it has one of the best detection engines (although a little to sensitive). NOD32 and Karspersky are among the best too, if you're willing to pay for them. Take a look at some tests here, and you can make your own decisions: http://av-comparatives.org

AVG has never been slow for me, nor any computer, old or new, that I've put it on. It finds a higher majority of viruses then other protection programs, and the cpu and ram usage isn't much. And it takes less than a minute to update if you have a good connection.