Offline
Forum
CS2D General D-Dos issues
D-Dos issues
16 replies
1 
Implementing such feature is pointless if you've got some common sense.
pepinakiller: this program only affects Linux servers, and it is not ddos, only crashes the server without massive packages.@
Talented Doge: I think you're the one with no common sense. 
pepinakiller: A DDoS attack is a remote attack. The attacking program does not run on the local machine. Hence you can't check if it's running.There is no effective protection against DDoS. Otherwise DDoS wouldn't be such a huge problem...
Can you send me the source where you found the program? I can try to take it offline.
edited 1×, last 15.03.18 11:50:37 pm
1
2
3
4
5
6
7
8
2
3
4
5
6
7
8
48299 16.922447 192.168.178.22 77.55.227.56 UDP 42 50159 → 36964 Len=0 0000 90 6e bb d9 6a 1b d4 6a 6a 79 99 2f 08 00 45 00 .n..j..jjy./..E. 0010 00 1c 2c 51 00 00 80 11 6b 51 c0 a8 b2 16 4d 37 ..,Q....kQ....M7 0020 e3 38 c3 ef 90 64 00 08 08 5b .8...d...[ 906ebbd96a1bd46a6a79992f08004500001c2c51000080116b51c0a8b2164d37e338c3ef90640008085b
You can block that packet data in iptables to avoid that "DoS attack".
I'm no Linux expert, but could these command lines from this website help ?
https://javapipe.com/ddos/blog/iptables-ddos-protection/As I'm also experiencing D-Dos issues
edited 1×, last 16.03.18 05:48:37 pm
Hajt has writtenThis program send that udp packet:
You can block that packet data in iptables to avoid that "DoS attack".
1
2
3
4
5
6
7
8
2
3
4
5
6
7
8
48299 16.922447 192.168.178.22 77.55.227.56 UDP 42 50159 → 36964 Len=0 0000 90 6e bb d9 6a 1b d4 6a 6a 79 99 2f 08 00 45 00 .n..j..jjy./..E. 0010 00 1c 2c 51 00 00 80 11 6b 51 c0 a8 b2 16 4d 37 ..,Q....kQ....M7 0020 e3 38 c3 ef 90 64 00 08 08 5b .8...d...[ 906ebbd96a1bd46a6a79992f08004500001c2c51000080116b51c0a8b2164d37e338c3ef90640008085b
You can block that packet data in iptables to avoid that "DoS attack".
Would be like this?
$IPT -A INPUT -p udp -m udp --sport 42 -j DROP
$IPT -I INPUT -s 77.55.227.56 -j DROP
then you should save it;
iptables-save
Problem is, I start the server, it looks healthy. No lag, nothing. Works perfect. When you get a couple of players inside, it runs for some minutes and then server goes down. I've checked for logs for any kind of error report but it doesn't show anything.
Now, I'm not sure if that is a D-Dos or actual error on my server.
Casper- has writtenI'm experiencing issues with my server, not sure if it's D-Dos.
To see whether it was a (D)DoS or not you have to understand one thing:
(D)DoS attacks are coming from multiple sources involving a large (or not so large) squad of botnets which are infected computers controlled remotely by the attacker. Unless the attack was coming from only a single source then it is just plain DoS.The matter that your server goes down after several minutes is partly because your VPS has very weak system specifications such as weak CPU, low RAM, etc. If you run heavy Lua scripts and other heavy resources then that is understandable.
@
pepinakiller: A software can't deploy (D)DoS attacks (see my argument regard this above). This is just wrong. The problem you described is actually because of DoS attacks coming from a single source that affect other servers.This can be tackled with proper firewall configuration but looks like most of people hosting servers have no freaking clue what are the security implications of a unsecured VPS/server. Instead of becoming a drama queen, you should rather learn and stop moaning all over. It won't work.
mrc has written Hajt has writtenThis program send that udp packet:
You can block that packet data in iptables to avoid that "DoS attack".
1
2
3
4
5
6
7
8
2
3
4
5
6
7
8
48299 16.922447 192.168.178.22 77.55.227.56 UDP 42 50159 → 36964 Len=0 0000 90 6e bb d9 6a 1b d4 6a 6a 79 99 2f 08 00 45 00 .n..j..jjy./..E. 0010 00 1c 2c 51 00 00 80 11 6b 51 c0 a8 b2 16 4d 37 ..,Q....kQ....M7 0020 e3 38 c3 ef 90 64 00 08 08 5b .8...d...[ 906ebbd96a1bd46a6a79992f08004500001c2c51000080116b51c0a8b2164d37e338c3ef90640008085b
You can block that packet data in iptables to avoid that "DoS attack".
Would be like this?
$IPT -A INPUT -p udp -m udp --sport 42 -j DROP
$IPT -I INPUT -s 77.55.227.56 -j DROP
No. As you can see packet length is 0 so this should enough:
1
iptables -A INPUT -p udp -m length --length 0:28 -j DROP
Hajt: it prevents some attacks, but others not... My server is getting ddosed (cpu high load), meh...
edited 2×, last 19.03.18 02:58:45 am
If there is an experienced ddoser in cs2d, I think, this program can't be stronger than ddoser.
But keep going with ideas about Anti-Ddos things.
1