[plazma]

Can you make anything to block this @juropito ?

[SpawnerF]

I don't see how he can manage to control that, the only solution that I'm using now is "iptables" ( on linux ).

[joropito]

Originally Posted by plazma Can you make anything to block this @juropito ?

I have it done already for linux only. It's a private module and only avoid cpu overhead on hlds process.

[indraraj striker]

Originally Posted by joropito I have it done already for linux only. It's a private module and only avoid cpu overhead on hlds process.

can you share that module with me (pm)
Thanks.

[pupdebox]

You can't protect your servers with softwares boys. (Might work against simple attacks)
You need physical protection against big daddy attacks

[joropito]

Originally Posted by pupdebox You can't protect your servers with softwares boys. (Might work against simple attacks) You need physical protection against big daddy attacks

You can protect cpu exhaustion when the attack doesn't overload the connection.

There're not only bandwidth overload ddos attacks, you may get a ddos attack to just overload your cpu

[aron9forever]

Originally Posted by joropito You can protect cpu exhaustion when the attack doesn't overload the connection. There're not only bandwidth overload ddos attacks, you may get a ddos attack to just overload your cpu

yeah, that's what physical firewalls are for, to save the CPU or more commonly the network card from bottlenecking
if the connection is overloaded the best hardware can't help, at this point all your packets are malicious


I'm not saying it's impossible to block some attacks through software but why would you ever embed that software into HLDS?

[joropito]

Originally Posted by aron9forever I'm not saying it's impossible to block some attacks through software but why would you ever embed that software into HLDS?

In my experience I found server administrators don't have the knowledge to talk with their hosting providers to ask for traffic blocking. Also not every hosting provider give answers not to mention the cases where attackers changes or spoof the ip addresses.
It's hard to get support.

When you host a server on a shared box, you can't setup and manage iptables yourself, o even some admins doesn't know what's iptables and how they can work with it.

This is why I made it. It's like iptables but only for traffic going to HLDS and easy to manage.

[simanovich]

Best way of preventing a DDoS Attack is by hardware level (like the ones that your ISP have).