Raised This Month: $32 Target: $400
 8% 

Protecting your server!


Post New Thread Reply   
 
Thread Tools Display Modes
asherkin
SourceMod Developer
Join Date: Aug 2009
Location: OnGameFrame()
Old 03-28-2012 , 11:19   Re: Protecting your server!
Reply With Quote #51

Quote:
Originally Posted by Visual77 View Post
there has been reports of the connect spam preventer in SMAC crashing the server on client connection, proof's have been provided but I don't think a soultion has. if you don't believe me agian, go to the forum and check if people have had crashes with the client spam connect preventer.
The crash is actually caused by the Connect extension, which SMAC optionally uses to protect against an engine exploit.

If people followed instructions, they wouldn't have an issue.
__________________
asherkin is offline
pillepallus
Senior Member
Join Date: Oct 2011
Old 03-28-2012 , 14:33   Re: Protecting your server!
Reply With Quote #52

Quote:
Originally Posted by asherkin View Post
If people followed instructions, they wouldn't have an issue.
u smells like an admin. xD
can u attach the fixed one to the main thread. so no one can fail again. some of my friends are failing all the time because they do not read the whole thread. the last update should be available in the first thread. related problems are very old so to check the whole thread is not needed. thx
pillepallus is offline
jackliu92
Senior Member
Join Date: Aug 2006
Old 03-28-2012 , 15:01   Re: Protecting your server!
Reply With Quote #53

Quote:
Originally Posted by pillepallus View Post
u smells like an admin. xD
can u attach the fixed one to the main thread. so no one can fail again. some of my friends are failing all the time because they do not read the whole thread. the last update should be available in the first thread. related problems are very old so to check the whole thread is not needed. thx
https://forums.alliedmods.net/showthread.php?t=176755
I'm not sure if this is the correct solution.
__________________
jackliu92 is offline
Filoret
Member
Join Date: Aug 2007
Old 04-02-2012 , 19:10   Re: Protecting your server!
Reply With Quote #54

I have very strange server work, at attachment i mark time
i connected to server at that time and switch to servers screen, my server were freezed

can any one know why it can be like that?

Code:
-> sm plugins list
[SM] Listing 62 plugins:
  01 "Anti-Flood" (1.4.0-dev) by AlliedModders LLC
  02 "Basic Comm Control" (1.4.0-dev) by AlliedModders LLC
  03 "[ANY] Automatic Steam Update" (1.4.1) by Dr. McKay
  04 "MapChooser" (1.4.0-dev) by AlliedModders LLC
  05 "Bomb Score Modifier" (1.0.0) by exvel
  06 "Team Bets" (2.6) by GrimReaper - Original by ferret
  07 "SuperLogs: CSS" (1.2.4) by psychonic
  08 "Updater" (1.1.4) by GoD-Tony
  09 "Reserved Slots" (1.4.0-dev) by AlliedModders LLC
  10 "Fun Commands" (1.4.0-dev) by AlliedModders LLC
  11 "Rock The Vote" (1.4.0-dev) by AlliedModders LLC
  12 "Basic Chat" (1.4.0-dev) by AlliedModders LLC
  13 "Basic Votes" (1.4.0-dev) by AlliedModders LLC
  14 "Damage report" (1.1.13) by [30+]Gemeni
  15 "VAC Status Checker" (1.3.3) by Stevo.TVR
  16 "HLstatsX CE Ingame Plugin" (1.6.10) by psychonic
  17 "Fun Votes" (1.4.0-dev) by AlliedModders LLC
  18 "CSS Bank" (1.4.4) by Miraculix
  19 "Radio Spam Block" (1.0.0) by exvel
  20 "Kill Assist" (1.4.0) by RedSword / Bob Le Ponge
  21 "UpdateRadar Fix" (fix) by GoD-Tony
  22 "Basic Info Triggers" (1.4.0-dev) by AlliedModders LLC
  23 "spawntools7" (0.9) by meng
  24 "SMAC Anti-Wallhack" (0.7.7.5) by GoD-Tony, psychonic, Kigen
  25 "SMAC Aimbot Detector" (0.7.7.5) by GoD-Tony
  26 "SMAC Eye Angle Test" (0.7.7.5) by GoD-Tony, psychonic
  27 "SMAC Spinhack Detector" (0.7.7.5) by GoD-Tony
  28 "SMAC AutoTrigger Detector" (0.7.7.5) by GoD-Tony
  29 "SMAC ConVar Checker" (0.7.7.5) by GoD-Tony, psychonic, Kigen
  30 "SMAC Rcon Locker" (0.7.7.5) by GoD-Tony, Kigen
  31 "SMAC CS:S Anti-Smoke" (0.7.7.5) by GoD-Tony
  32 "SMAC Client Protection" (0.7.7.5) by GoD-Tony, psychonic, Kigen
  33 "SMAC CS:S Anti-Rejoin" (0.7.7.5) by Kigen
  34 "SMAC Anti-Speedhack" (0.7.7.5) by GoD-Tony
  35 "SMAC KAC Global Banlist" (0.7.7.5) by Kigen
  36 "SourceMod Anti-Cheat" (0.7.7.5) by GoD-Tony, psychonic
  37 "SMAC Command Monitor" (0.7.7.5) by GoD-Tony, psychonic, Kigen
  38 "SMAC CS:S Anti-Flash" (0.7.7.5) by GoD-Tony
  39 "Admin Menu" (1.4.0-dev) by AlliedModders LLC
  40 "Bounty" (1.2.1) by Dr!fter
  41 "TeamSwitch" (1.3) by MistaGee
  42 "Simple TK Manager" (1.0d) by Lebson506th
  43 "Weapon Restrict" (3.0.8) by Dr!fter
  44 "Admin File Reader" (1.4.0-dev) by AlliedModders LLC
  45 "Advertisements" (0.5.5) by Tsunami
  46 "Players Votes" (1.5.0) by The Resident, pZv!
  47 "Quake Sounds" (2.7) by dalto, Grrrrrrrrrrrrrrrrrrr, and psychonic
  48 "Player Commands" (1.4.0-dev) by AlliedModders LLC
  49 "Map Nominations" (1.4.0-dev) by AlliedModders LLC
  50 "ExtendedComm" (3.0.7a) by Twisted|Panda
  51 "Admin Help" (1.4.0-dev) by AlliedModders LLC
  52 "Team Balance" (2.2.2) by dalto
  53 "Save Scores" (1.3.4) by exvel
  54 "SourceBans" (1.4.9) by SourceBans Development Team
  55 "Auto Swap Team" (2.2.1) by Experto
  56 "Advanced admin commands" (0.16) by 3sigma
  57 "Client Preferences" (1.4.0-dev) by AlliedModders LLC
  58 "Sourcebans Checker" (1.0.0) by psychonic & Ca$h Munny
  59 "Nextmap" (1.4.0-dev) by AlliedModders LLC
  60 "Sound Commands" (1.4.0-dev) by AlliedModders LLC
  61 "Basic Commands" (1.4.0-dev) by AlliedModders LLC
  62 "AFK Manager" (3.4.3) by Rothgar

-> sm exts list
[SM] Displaying 17 extensions:
[01] Automatic Updater (1.5.0-dev): Updates SourceMod gamedata files
[02] Webternet (1.5.0-dev): Extension for interacting with URLs
[03] Server Secure - Files Only (1.0.0): The finest defence
[04] Server Query Cache (1.8): Responds to A2S_INFO queries
[05] CS:S Tools (1.5.0-dev): CS:S extended functionality
[06] BinTools (1.5.0-dev): Low-level C/C++ Calling API
[07] SDK Tools (1.5.0-dev): Source SDK Tools
[08] Top Menus (1.5.0-dev): Creates sorted nested menus
[09] SteamTools (0.8.2): SteamWorks for SourceMod.
[10] cURL Extension (1.3.0.0): cURL Extension
[11] Socket (3.0.1): Socket extension for SourceMod
[12] Client Preferences (1.5.0-dev): Saves client preference settings
[13] SQLite (1.5.0-dev): SQLite Driver
[14] SDK Hooks (2.1.0): Source SDK Hooks
[15] Connect (1.0.0): 
[16] GeoIP (1.5.0-dev): Geographical IP information
[17] MySQL-DBI (1.5.0-dev): MySQL driver implementation for DBI

-> meta list
Listing 9 plugins:
  [01] SourceMod (1.5.0-dev) by AlliedModders LLC
  [02] DoS Protect (1.0.0.0) by ZombieX2.net
  [03] Server Secure - Files Only (1.0.0) by AzuiSleet (mod by asherkin)
  [04] Server Query Cache (1.8) by Recon + Afronanny + Kyle12 + Zephyrus
  [05] CS:S Tools (1.5.0-dev) by AlliedModders LLC
  [06] SDK Tools (1.5.0-dev) by AlliedModders LLC
  [07] SteamTools (0.8.2) by Asher Baker (asherkin)
  [08] SDK Hooks (2.1.0) by Tsunami, psychonic
  [09] Connect (1.0.0) by Asher "asherkin" Baker
may be come plugin issue?
Attached Thumbnails
Click image for larger version

Name:	??????????.JPG
Views:	311
Size:	51.2 KB
ID:	101470  
Filoret is offline
ReFlexPoison
☠☠☠
Join Date: Jul 2011
Location: ☠☠☠
Old 04-10-2012 , 15:41   Re: Protecting your server!
Reply With Quote #55

I haven't searched he thread much, but I am either getting port scans/DoS attacks. Only occurs when my specific TF2 ports are open and my server is online.

Any way to get easy protection.

Not much knowledge in server/Internet attacks.


Off note: Hating auto correct on iPhone

Last edited by ReFlexPoison; 04-10-2012 at 15:42.
ReFlexPoison is offline
pillepallus
Senior Member
Join Date: Oct 2011
Old 04-15-2012 , 12:28   Re: Protecting your server!
Reply With Quote #56

Quote:
Originally Posted by ReFlexPoison View Post
I haven't searched he thread much, but I am either getting port scans/DoS attacks. Only occurs when my specific TF2 ports are open and my server is online.

Any way to get easy protection.

Not much knowledge in server/Internet attacks.


Off note: Hating auto correct on iPhone
for windows u need to use external firewalls. this will help in case of linux: http://forums.alliedmods.net/showthread.php?t=151551
pillepallus is offline
ReFlexPoison
☠☠☠
Join Date: Jul 2011
Location: ☠☠☠
Old 04-15-2012 , 13:15   Re: Protecting your server!
Reply With Quote #57

Quote:
Originally Posted by pillepallus View Post
for windows u need to use external firewalls.[/URL]
where would I need to do for external firewalls? poorly educated in internet security
ReFlexPoison is offline
pillepallus
Senior Member
Join Date: Oct 2011
Old 04-15-2012 , 14:03   Re: Protecting your server!
Reply With Quote #58

Quote:
Originally Posted by ReFlexPoison View Post
where would I need to do for external firewalls? poorly educated in internet security
u need to contact ur provider to get an external firewall (or where u hosting the server?). this service is not cheap. but you should ask for that. still need to say: still not clever to use windows.

windows is still designed to use behind another firewall... im windows admin in real life since many many years. still asking me why provider still using windows for gameservers without a good firewall. except some good things within the active directory windows is always the worse solution.... for gaming neva take windows except u have much money...

its very important to record the traffic locally. forward this to ur provider and ask to block. thats same like a firewall just slower and not all provider will help. xDDDDDDDDDDDDDDD
pillepallus is offline
Chewgum
New Member
Join Date: Jan 2012
Old 06-06-2012 , 15:39   Re: Protecting your server!
Reply With Quote #59

The following commented stuff in this, if they're enabled, you can't connect to your ftp server if it's hosted on the same machine.

Code:
#$IPT -A INPUT -p tcp --syn -j DROP
#$IPT -A INPUT -m conntrack --ctstate NEW -p tcp --tcp-flags SYN,RST,ACK,FIN,URG,PSH SYN -j DROP
#$IPT -A INPUT -m conntrack --ctstate NEW -p tcp --tcp-flags SYN,RST,ACK,FIN,URG,PSH FIN -j DROP
#$IPT -A INPUT -m conntrack --ctstate NEW -p tcp --tcp-flags SYN,RST,ACK,FIN,URG,PSH ACK -j DROP
#$IPT -A INPUT -m conntrack --ctstate INVALID -p tcp ! --tcp-flags SYN,RST,ACK,FIN,URG,PSH SYN,RST,ACK,FIN,URG,PSH -j DROP
#$IPT -A INPUT -m conntrack --ctstate NEW -p tcp --tcp-flags SYN,RST,ACK,FIN,URG,PSH FIN,URG,PSH -j DROP
#$IPT -A INPUT -p UDP -f -j DROP
#$IPT -A INPUT -p TCP --syn -m iplimit --iplimit-above 9 -j DROP
#$IPT -A INPUT -m pkttype --pkt-type broadcast -j DROP
#$IPT -A INPUT -p ICMP --icmp-type echo-request -m pkttype --pkttype broadcast -j DROP
$IPT -A INPUT -p ICMP --icmp-type echo-request -m limit --limit 3/s -j ACCEPT
#$IPT -A INPUT -p TCP --syn -m iplimit --iplimit-above 3 -j DROP
#$IPT -A INPUT -p UDP -m pkttype --pkt-type broadcast -j DROP
$IPT -A INPUT -p UDP -m limit --limit 3/s -j ACCEPT
#$IPT -A INPUT -p ICMP -f -j DROP
Maybe I setup something wrong though.
Chewgum is offline
Mavrick4283
Veteran Member
Join Date: Apr 2010
Location: 127.0.0.1@root
Old 06-14-2012 , 13:29   Re: Protecting your server!
Reply With Quote #60

@chewgum first of all you would have to do iptables -L and post your full list so we would be able to tell you if any rules were causeing you FTP server not to be connected to on the local network. If you are trying localhost and it is not working then i am guessing you are droping all local connections or you do not have the ftp server configured correctly.

These thread may help you lock down your linux install tho.

As given above. http://forums.alliedmods.net/showthread.php?t=151551

Just stuff you should be doing. https://forums.alliedmods.net/showthread.php?t=166037

And the firewall commands // how to https://forums.alliedmods.net/showthread.php?t=165560
__________________
Mavrick4283 is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 17:06.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode