Sie sind nicht angemeldet.
sourceserver.info »
Main »
Dedicated Server »
Hilfe »
Sonntag, 20. Juni 2010, 08:08
Sonntag, 20. Juni 2010, 12:01
|
Quellcode |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 |
# UDP-Flood verhindern: iptables -A INPUT -p udp -m udp --dport 27015:27900 -m length --length 0 -j DROP iptables -A INPUT -p udp -m udp --dport 27015:27900 -m length --length 28 -j DROP iptables -A INPUT -p udp -m udp --dport 27015:27900 -m length --length 39 -j DROP #iptables -A INPUT -p udp -m udp --dport 27015:27900 -m length --length 48 -j DROP #Die Regel mag mein Server zur Zeit nicht #iptables -A INPUT -p udp -m udp --dport 27015:29000 -m length --length 105 -j DROP #Kann dann auf den SourceTV nicht mehr connecten # HLstatsX-Server zulassen, falls dieser extern läuft iptables -A INPUT -p tcp -m tcp -s 1.2.3.4/32 -j ACCEPT # TCP-Flood unterbinden iptables -A INPUT -p tcp -m tcp --dport 27015:29000 -m hashlimit --hashlimit-upto 2/sec --hashlimit-burst 1 --hashlimit-mode srcip,dstip,dstport --hashlimit-name TF_PACKET_LIMIT -j ACCEPT # Zugriff auf TCP (Rcon-Port) 27015-29000 untersagen iptables -A INPUT -p tcp -m tcp --dport 27015:29000 -j DROP # Fehlenden Masterserver sperren (ist immer noch Hardcoed im Binary des Servers) iptables -A OUTPUT -d 68.142.88.34/32 -p tcp -m tcp --dport 27038 -j REJECT --reject-with icmp-port-unreachable # Betrügerische Netzwerke blocken iptables -A INPUT -s 10.0.0.0/8 -j DROP iptables -A INPUT -s 169.254.0.0/16 -j DROP iptables -A INPUT -s 172.16.0.0/12 -j DROP #iptables -A INPUT -s 127.0.0.0/8 -j DROP iptables -A INPUT -s 224.0.0.0/4 -j DROP iptables -A INPUT -d 224.0.0.0/4 -j DROP iptables -A INPUT -s 240.0.0.0/5 -j DROP iptables -A INPUT -d 240.0.0.0/5 -j DROP iptables -A INPUT -s 0.0.0.0/8 -j DROP iptables -A INPUT -d 0.0.0.0/8 -j DROP iptables -A INPUT -d 239.255.255.0/24 -j DROP iptables -A INPUT -d 255.255.255.255 -j DROP # Fehlerhafte Pakete sofort verwerfen iptables -A INPUT -m state --state INVALID -j DROP iptables -A FORWARD -m state --state INVALID -j DROP iptables -A OUTPUT -m state --state INVALID -j DROP # Betrügerische TCP-Pakete blocken iptables -A INPUT -p tcp -m tcp --tcp-flags SYN,FIN SYN,FIN -j DROP iptables -A INPUT -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP |
Sonntag, 20. Juni 2010, 13:24
Zitat von »"GeNeRaLbEaM"«
Installier mal das Servsecurity das sollte Abhilfe schaffen.
http://addons.eventscripts.com/addons/view/servsecurity">http://addons.eventscripts.com/addons/view/servsecurity</a>
Oder auch D-Fens
http://forums.alliedmods.net/showthread.php?t=109453">http://forums.alliedmods.net/showthread.php?t=109453</a>
LG
GeNeRaLbEaM
# ServSecurity don't protect your server from (D)DoS. To protect you from DoS use this plugin:
http://www.sourceop.com/modules.php?name=Downloads&d_op=viewdownload&cid=9">http://www.sourceop.com/modules.php?nam ... load&cid=9</a>
Here is a script I am using to try to stop those DOS attacks. I don't remember where I got this script from. So the credit does not go to me. I just uploaded it up to my FTP so you guys could use it if you wish. So far since I installed this script on all my servers. I haven't been getting DOS attacked anymore. Here is the link to download the script.
How to install:
just add it to your addons folder
Put the vdf file in your metta mod folder
Then just paste this in your INI file in the mettamod folder. addons/dosprotect/bin/dosprotect_mm
I am using windows OS. So if you are using Linux. Just use the other file in the bin folder.
NOTE: After you install. You do not need to restart your server or change map etc. It loads automatically. Just go into console and type meta list and you will see that it's running. Hope this helps!!
http://www.ocgungame.net/SRCDS_Denial_of_Service_Protect.zip">http://www.ocgungame.net/SRCDS_Denial_o ... rotect.zip</a>
