Sie sind nicht angemeldet.
sourceserver.info »
Main »
Dedicated Server »
Hilfe »
Mittwoch, 11. August 2010, 00:36
|
Quellcode |
1 2 3 4 5 6 |
~# netstat -anp | grep srcds tcp 0 0 217.172.***.***:27015 0.0.0.0:* LISTEN 1510/srcds_linux udp 0 0 217.172.***.***:27015 0.0.0.0:* 1510/srcds_linux udp 0 0 217.172.***.***:26901 0.0.0.0:* 1510/srcds_linux unix 3 [ ] STREAM VERBUNDEN 574558 1510/srcds_linux unix 3 [ ] STREAM VERBUNDEN 574557 1510/srcds_linux |
|
|
Quellcode |
1 2 3 4 5 6 |
$IPT -A tcp_inbound -p TCP -s 0/0 -d $INET_ADDRESS --destination-port 27015 -j ACCEPT $IPT -A tcp_outbound -p TCP -s 0/0 -d $INET_ADDRESS --destination-port 27015 -j ACCEPT $IPT -A udp_inbound -p UDP -s 0/0 -d $INET_ADDRESS --destination-port 27015 -j ACCEPT $IPT -A udp_outbound -p UDP -s 0/0 -d $INET_ADDRESS --destination-port 27015 -j ACCEPT $IPT -A udp_inbound -p UDP -s 0/0 -d $INET_ADDRESS --destination-port 26901 -j ACCEPT $IPT -A udp_outbound -p UDP -s 0/0 -d $INET_ADDRESS --destination-port 26901 -j ACCEPT |
Mittwoch, 11. August 2010, 10:28
|
|
Quellcode |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
# HALF-LIFE
# HL Shortpackeges Filtern fuer Gold Source Server DDos etc
iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 0 -j DROP
iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 28 -j DROP
iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 39 -j DROP
iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 48 -j DROP
iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 105 -j DROP
# VAC Friends Autopudate etc
iptables -A INPUT -i eth0 -m state --state NEW -p tcp --dport 6000:6003 -j ACCEPT
iptables -A INPUT -i eth0 -m state --state NEW -p tcp --dport 7001:7002 -j ACCEPT
iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 27005 -j ACCEPT
iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 27010 -j ACCEPT
# HALF-LIFE einzelne Server
iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 27015 -j ACCEPT
# HALF-LIFE RCON
iptables -A INPUT -p tcp -m tcp --dport 27015 -m hashlimit --hashlimit-upto 2/sec --hashlimit-burst 1 --hashlimit-mode srcip,dstip,dstport --hashlimit-name TF_PACKET_LIMIT -j ACCEP
|
