Server Attack?

Ask questions about dedicated servers here and we and other users will do our best to answer them. Please also refer to the self-help section for tutorials and answers to the most commonly asked questions.
Post Reply
Brain
New to forums
New to forums
Posts: 4
https://www.youtube.com/channel/UC40BgXanDqOYoVCYFDSTfHA
Joined: Fri Nov 05, 2010 7:38 am

Server Attack?

Post by Brain »

I think that my VDS is being attacked currently and still hasnt stopped. Netstat doesnt really show anything, but i've been using windump to show me all packets going into my server. It seems that there are many different ips sending packets of the same size (14). How can i block them? This is port specific and srcds isn't crashing.

If you need to see the list of current connections etc please let me know. Thanks
User avatar
Edge100x
Founder
Founder
Posts: 13127
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Server Attack?

Post by Edge100x »

On Windows, there's no easy way to block packets of a certain size. If they're coming from a discrete set of hosts, though, you could block each IP.

Are you seeing lag or problems in-game?
Brain
New to forums
New to forums
Posts: 4
Joined: Fri Nov 05, 2010 7:38 am

Re: Server Attack?

Post by Brain »

Yea, i can't find the server in the server list and i can't connect. It's been occurring for the past day. I've switched ports for now which fixed the issue but ill need to use it again. Would u recommend i switch to another os?
User avatar
Edge100x
Founder
Founder
Posts: 13127
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Server Attack?

Post by Edge100x »

On Linux, you'd be able to block by packet length, so there could be some advantage to that. But, it also might not help in your case, if your traffic matches legitimate traffic, as well.

It sounds like you're either being flooded with 0-length packets, or query packets -- probably the latter. You might try running DAF or Query Cache, from here: http://wiki.alliedmods.net/SRCDS_Hardening#Lag.2FDOS. I haven't tested them with the latest game updates, though, and Query Cache reportedly does not work for TF2, just CSS (I don't know which game you're running).
User avatar
Edge100x
Founder
Founder
Posts: 13127
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Server Attack?

Post by Edge100x »

On Query Cache, there's an updated version here, it looks like: http://forums.alliedmods.net/showthread.php?t=134373. But, I don't know if it works, either. With so many game updates coming out, it's hard for plugin authors to keep up.
Brain
New to forums
New to forums
Posts: 4
Joined: Fri Nov 05, 2010 7:38 am

Re: Server Attack?

Post by Brain »

Alright, just installed query cache, as i had DAF before and im gonna see how it goes. Thanks for your quick response.
Brain
New to forums
New to forums
Posts: 4
Joined: Fri Nov 05, 2010 7:38 am

Re: Server Attack?

Post by Brain »

Yea that worked perfectly, thank you very much. You guys are awesome.
User avatar
Edge100x
Founder
Founder
Posts: 13127
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: Server Attack?

Post by Edge100x »

Glad to hear it :)
User avatar
rlm850
This is my homepage
This is my homepage
Posts: 141
Joined: Thu Dec 10, 2009 12:17 am
Location: Staten Island, NY
Contact:

Re: Server Attack?

Post by rlm850 »

Following up your message john, after all of these continuous updated DAF still does work. They're on version 3 of it now.
Post Reply