Thanks Edge, I've done so and all is calm currently.
I've set it to 500 though as we have over 70k unique players and around 6k regulars across the bored.
And the modules for srcds should be able to handle the 500 a second.
Search found 6 matches
- Tue Jun 19, 2012 3:20 pm
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
- Tue Jun 19, 2012 2:33 am
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
Re: Source query status ddos.
You are in luck as they are A2S_INFO (FFFF FFFF 54) packets, they are easily blockable with that plugin. Thankfully your not being hit with other queries similar to A2S_INFO but are actually part of the whole query process. I attempted filtering them but you end up just blocking legit queries. Hope...
- Mon Jun 18, 2012 2:06 pm
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
Re: Source query status ddos.
Oh, then sure let's give it a shot.Edge100x wrote:Kind of, but the dynamic whitelisting system does not just use a static list of IPs. It's much more developed than that.Sam86 wrote:Tickets already open ID 833394. By whitelist you mean a whitelist for connecting IP's? If so then I'm not sure that would be viable.
- Mon Jun 18, 2012 1:30 pm
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
Re: Source query status ddos.
If you have a managed VDS or managed Linux dedicated machine, please open a support request, and I can enable a whitelisting system that would help you. An external caching system could also potentially work, but that's more complicated and not something that we have support for. The game itself is...
- Mon Jun 18, 2012 1:10 pm
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
Re: Source query status ddos.
I'll give QueryCache a go now, but I can't really find much info as to what it does. It's a shame the firewall can't filter by packets per seconds. If > 5kpps then activate rule 9 for example. The only real way I can think of that would let players join but also stop this attack is: If I had a way o...
- Mon Jun 18, 2012 12:47 pm
- Forum: Dedicated servers and Virtual Dedicated Servers
- Topic: Source query status ddos.
- Replies: 20
- Views: 6238
Source query status ddos.
So, I'm coming here to ask for some help. So I'm currently being hit with around 30kpps ddos. IP's are spoofed and source ports are randomized. 12:27:41.963072 IP (tos 0x0, ttl 78, id 23131, offset 0, flags [none], proto UDP (17), length 53) 80.171.194.108.23239 > 74.91.116.247.27015: UDP, length 25...