Page 1 of 1

DDoS / High Ping / Timeout question

Posted: Thu Dec 16, 2010 9:21 am
by TnTSCS
Hello all.

An abusive player who was mic spamming our server last night stated in chat that he was "crash the server"

Anyways, immediately upon taking admin action on him (banning him) at 2300 12/15/10, the server appeared to be DDoS'd. This went on till about 0630 12/16/10.

The server showed as Timeout and restarting the server immediately showed ping between 600-2500. While I was working on the server, trying to figure out what was causing this issue, I had not yet been made privy to this players threats and possible actions.

I thought that a plugin must be causing the issue, maybe KAC or SM updating and stuck in a loop of sorts. Anyways, I sm plugins unload kigen-ac-pub and immediately the server's ping returned to normal. sm plugins load kigen-ac-pub and everything was still fine.

Is there a way this player could have executed a script/command specific to KAC that would cause KAC to freak out and throw the ping so high and timeout the server and appear like a DDoS?

I can provide the players SteamID in a prvmsg if needed. There is nothing in the KAC logs regarding this player :(

Re: DDoS / High Ping / Timeout question

Posted: Thu Dec 16, 2010 10:42 am
by Kigen
No, there is no known issue with KAC that would create this loop.

Its highly likely that the person use a query spammer. This spammer sends query packets to your server at a fast rate and from falsified IPs.

Re: DDoS / High Ping / Timeout question

Posted: Thu Dec 16, 2010 5:21 pm
by nightrider
You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373

Re: DDoS / High Ping / Timeout question

Posted: Fri Dec 17, 2010 4:23 am
by matrixmark
nightrider wrote:You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
That looks good but is there a linux version?

Re: DDoS / High Ping / Timeout question

Posted: Fri Dec 17, 2010 9:28 am
by nightrider
matrixmark wrote:That looks good but is there a linux version?
Query Cache 1.7 - Linux & Windows
http://code.google.com/p/querycache/downloads/list

Re: DDoS / High Ping / Timeout question

Posted: Tue Dec 21, 2010 4:23 am
by matrixmark
Thanks Nightrider :):)

Re: DDoS / High Ping / Timeout question

Posted: Tue Dec 21, 2010 4:50 pm
by nightrider
My pleasure ... ;)