Raised This Month: $48 Target: $400
 12% 

DoS Attack Fixer for CSS v2


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
zhelev81
Veteran Member
Join Date: Nov 2007
Location: Varna,Bulgaria
Old 03-16-2009 , 14:05   DoS Attack Fixer for CSS v2
Reply With Quote #1

I know that here is not the place to ask but maybe some of you already tryed to load this plugin on linux.

I get seg fault anytime i try to load it.

If someone knows how exactly this should be done,to help lil bit.
zhelev81 is offline
Send a message via ICQ to zhelev81 Send a message via MSN to zhelev81 Send a message via Skype™ to zhelev81
BrutalGoerge
SourceMod Donor
Join Date: Jul 2007
Old 03-16-2009 , 14:17   Re: DoS Attack Fixer for CSS v2
Reply With Quote #2

for linux, just use this iptables rule.
iptables -A INPUT -p udp --dport 27015 -m length --length 28 -j DROP

--dport <whatever ports you're using for your servers>

looking at your sig.. these 2 should work
iptables -A INPUT -p udp --dport 27015 -m length --length 28 -j DROP
iptables -A INPUT -p udp --dport 27016 -m length --length 28 -j DROP
__________________
My Pluggies If you like, consider to me.
BrutalGoerge is offline
zhelev81
Veteran Member
Join Date: Nov 2007
Location: Varna,Bulgaria
Old 03-16-2009 , 14:47   Re: DoS Attack Fixer for CSS v2
Reply With Quote #3

I did not get anything of this

can u explane me in more simple way ?
zhelev81 is offline
Send a message via ICQ to zhelev81 Send a message via MSN to zhelev81 Send a message via Skype™ to zhelev81
DontWannaName
Veteran Member
Join Date: Jun 2007
Location: VALVe Land, WA
Old 03-16-2009 , 16:42   Re: DoS Attack Fixer for CSS v2
Reply With Quote #4

Ya in english haha
__________________

DontWannaName is offline
devicenull
Veteran Member
Join Date: Mar 2004
Location: CT
Old 03-16-2009 , 16:48   Re: DoS Attack Fixer for CSS v2
Reply With Quote #5

It's fairly simple.. if you have a linux based server, just run those two commands as root, and there's no need for a plugin. They will cause iptables (the firewall), to drop any attack packets before they reach the game server.

No plugin needed.
__________________
Various bits of semi-useful code in a bunch of languages: http://code.devicenull.org/
devicenull is offline
zhelev81
Veteran Member
Join Date: Nov 2007
Location: Varna,Bulgaria
Old 03-16-2009 , 17:01   Re: DoS Attack Fixer for CSS v2
Reply With Quote #6

So I need to run this everytime linux is restarted or only once ?
zhelev81 is offline
Send a message via ICQ to zhelev81 Send a message via MSN to zhelev81 Send a message via Skype™ to zhelev81
BrutalGoerge
SourceMod Donor
Join Date: Jul 2007
Old 03-16-2009 , 18:20   Re: DoS Attack Fixer for CSS v2
Reply With Quote #7

there is a way to save it, but i just stick in in my crontab @reboot =\
http://www.faqs.org/docs/iptables/iptables-save.html
__________________
My Pluggies If you like, consider to me.
BrutalGoerge is offline
devicenull
Veteran Member
Join Date: Mar 2004
Location: CT
Old 03-16-2009 , 19:27   Re: DoS Attack Fixer for CSS v2
Reply With Quote #8

Quote:
Originally Posted by zhelev81 View Post
So I need to run this everytime linux is restarted or only once ?
How often are you rebooting your linux box? Hell my dektop has an uptime of over a month
__________________
Various bits of semi-useful code in a bunch of languages: http://code.devicenull.org/
devicenull is offline
zhelev81
Veteran Member
Join Date: Nov 2007
Location: Varna,Bulgaria
Old 03-16-2009 , 20:01   Re: DoS Attack Fixer for CSS v2
Reply With Quote #9

3-4 months once ,but i don't want to forget
zhelev81 is offline
Send a message via ICQ to zhelev81 Send a message via MSN to zhelev81 Send a message via Skype™ to zhelev81
zhelev81
Veteran Member
Join Date: Nov 2007
Location: Varna,Bulgaria
Old 03-18-2009 , 16:55   Re: DoS Attack Fixer for CSS v2
Reply With Quote #10

Quote:
Originally Posted by BrutalGoerge View Post
for linux, just use this iptables rule.
iptables -A INPUT -p udp --dport 27015 -m length --length 28 -j DROP

--dport <whatever ports you're using for your servers>

looking at your sig.. these 2 should work
iptables -A INPUT -p udp --dport 27015 -m length --length 28 -j DROP
iptables -A INPUT -p udp --dport 27016 -m length --length 28 -j DROP

thanks ,it works but can you explane if this will protect me from if someone wants to crash me server?I think this is only for the flood to be stoped ?

Tnx once again
zhelev81 is offline
Send a message via ICQ to zhelev81 Send a message via MSN to zhelev81 Send a message via Skype™ to zhelev81
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 11:26.


Powered by vBulletin®
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Theme made by Freecode