Raised This Month: $51 Target: $400
 12% 

Spamming Serv


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
NiceGuyx
Senior Member
Join Date: Nov 2011
Old 02-08-2015 , 15:44   Spamming Serv
Reply With Quote #1

Please delete this post

Last edited by NiceGuyx; 02-15-2015 at 10:08.
NiceGuyx is offline
sheo
SourceMod Donor
Join Date: Jul 2013
Location: Russia, Moscow
Old 02-08-2015 , 16:17   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #2

I believe there is an SM extension that already exists
__________________
sheo is offline
Mainstaff
AlliedModders Donor
Join Date: May 2011
Old 02-08-2015 , 16:34   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #3

If the request ips are spoofed you have to limit the requests per second for all ips. Otherwise, if the requests are sent only from a "few" ips you can limit the requests per ip. E.g:

Code:
iptables -A INPUT -p udp --dport 27015 -m string --hex-string "|ffffffff54|" --to 32 --algo bm -m hashlimit --hashlimit-name ServerQueries --hashlimit-above 5/second --hashlimit-burst 10 --hashlimit-htable-size 102400 --hashlimit-mode srcip -j DROP
Good luck

Edit: Depending on the size of the attack it may also help to increase sv_max_queries_sec_global. However, if it's a bigger attack you should NOT do that.

Last edited by Mainstaff; 02-08-2015 at 16:38.
Mainstaff is offline
NiceGuyx
Senior Member
Join Date: Nov 2011
Old 02-08-2015 , 17:55   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #4

Thanks you for your answer.

The attacker always use Spoofed IP to attack my server.

But the problem is that my server appear offline for hours. and the only way to connect to the server is by using: "connect <ip>" in console.

Is there anyway to fix it? because i saw a lot of servers that have already fixed this kind of attack.

Last edited by NiceGuyx; 02-08-2015 at 18:10.
NiceGuyx is offline
NiceGuyx
Senior Member
Join Date: Nov 2011
Old 02-08-2015 , 18:10   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #5

I just tried your rule.

And it's doesn't seems to works

I'm getting attacked at the same time, and the DROP count is still at: 0


Last edited by NiceGuyx; 02-08-2015 at 18:22.
NiceGuyx is offline
11530
Veteran Member
Join Date: Sep 2011
Location: Underworld
Old 02-08-2015 , 19:54   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #6

Did you try sheo's suggestion?

[EXTENSION] Query Cache (AS2_INFO DoS protection)


Extension is only for Windows and you're using Linux. Nevermind.
__________________

Last edited by 11530; 02-08-2015 at 19:55.
11530 is offline
Fearts
ferts of daeth
Join Date: Oct 2008
Old 02-08-2015 , 23:45   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #7

Quote:
Originally Posted by 11530 View Post
Did you try sheo's suggestion?

[EXTENSION] Query Cache (AS2_INFO DoS protection)


Extension is only for Windows and you're using Linux. Nevermind.
https://forums.alliedmods.net/showth...34373?t=134373

This has Linux.
__________________
Fearts is offline
Zephyrus
Cool Pig B)
Join Date: Jun 2010
Location: Hungary
Old 02-09-2015 , 01:06   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #8

sourcemod doesnt work on garrys mod. anyway add me on steam i can help you
__________________
Taking private C++/PHP/SourcePawn requests, PM me.
Zephyrus is offline
sheo
SourceMod Donor
Join Date: Jul 2013
Location: Russia, Moscow
Old 02-09-2015 , 01:52   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #9

Quote:
Originally Posted by Fearts View Post
Accoring to the description, it does not properly report tags. It`s important for some games, such as TF2. Also, 5s refresh is too rare.
__________________
sheo is offline
NiceGuyx
Senior Member
Join Date: Nov 2011
Old 02-09-2015 , 05:36   Re: A2S_INFO Spam Attack [PAYING 150$] FOR FIX.
Reply With Quote #10

@Zephyrus

Can you give me the link of your Steam Profile? so i can add you on my friends list.

Thank you
NiceGuyx is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 06:22.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode