[lantimilan]

Hello exist any file to protect server counter strike 1.6 from DDoS Attack , Flood and other program ?

[fysiks]

No. It would have to be mitigated at the ISP or some higher level (search online for solutions).

[guven5]

Dude where you were sent a post, here all pros about pawn scripting even world best coders here (each can work at NASA) but
when the subject ddos they have no answer at all,

give your system info... what system you use, dedicate or vps or what ever
if you have send your netflow report or nothing have, find a shell script, install and start to save attack reports and lets see what happen

[fysiks]

Originally Posted by guven5 give your system info... what system you use, dedicate or vps or what ever if you have send your netflow report or nothing have, find a shell script, install and start to save attack reports and lets see what happen

None of what you just said will prevent a DDOS attack or lead to a way to prevent such an attack.

[edon1337]

Blacklist the IP or Cloudflare? I remember some people were trying to boot my friend's Web Stresser but he had Cloudflare so nothing happened.

[joropito]

If the attack overflows your connection, you can't do anything on server side.

If it's only hanging hlds process because the flood, you can put a module to filter the traffic.

[exCore]

If it's a UDP Dos/Ddos then you have some chance to limit it or block it.

I will give you an example :

#include <amxmodx>
#include <orpheu>

const A2S_ACK = 'j';

public plugin_init() {
    

    register_plugin(
                     "Blocking A2S_ACK",
                     "0.1",
                     "Spawner"
    )
    
    OrpheuRegisterHook(OrpheuGetFunction("SV_ConnectionlessPacket"), "SV_ConnectionlessPacket_Hook");

}


public OrpheuHookReturn:SV_ConnectionlessPacket_Hook(
                        netFrom[],messageArg[]
)   {
    
    read_argv(0, messageArg, 2); 
    if( messageArg[0] == A2S_ACK )  {
        return OrpheuSupercede;
    }
    
    return OrpheuIgnored;
}

There is a lot of methods to Dos/Ddos a cs 1.6 server, VSE/ACK/(+And a lot more_).

If it's just VSE/ACK you can hook Sv_ConnectionlessPacket + hook "net_from" ( You can find an example coded by Arkshine using okapi ) and then limit the packets sent per second ( Based on IP's ).

Ps. : I did manage to do a A2S_ACK flood just using a plugin + sockets and it did crash the server.
So i'm just giving you an example. SV_ConnectionlessPacket you can search for it on the Internet.
Good luck.

[joropito]

Originally Posted by exCore If it's a UDP Dos/Ddos then you have some chance to limit it or block it.

Using a pawn plugin it's really a bad idea.
It has to be done 100% using C to avoid performance degrading.

Also you need to filter packets, best thing is hooking recvfrom (on linux).

[exCore]

Originally Posted by joropito Using a pawn plugin it's really a bad idea. It has to be done 100% using C to avoid performance degrading. Also you need to filter packets, best thing is hooking recvfrom (on linux).

Yea i agree with you, but i didn't understand this part :hooking recvfrom (on linux)?

[joropito]

Originally Posted by exCore Yea i agree with you, but i didn't understand this part :hooking recvfrom (on linux)?

Using C you can hook recvfrom (or windows equivalent) to "ban" incoming packets before entering engine. Engine uses recvfrom, so if you hook it you are a layer over engine.