Hello all.
An abusive player who was mic spamming our server last night stated in chat that he was "crash the server"
Anyways, immediately upon taking admin action on him (banning him) at 2300 12/15/10, the server appeared to be DDoS'd. This went on till about 0630 12/16/10.
The server showed as Timeout and restarting the server immediately showed ping between 600-2500. While I was working on the server, trying to figure out what was causing this issue, I had not yet been made privy to this players threats and possible actions.
I thought that a plugin must be causing the issue, maybe KAC or SM updating and stuck in a loop of sorts. Anyways, I sm plugins unload kigen-ac-pub and immediately the server's ping returned to normal. sm plugins load kigen-ac-pub and everything was still fine.
Is there a way this player could have executed a script/command specific to KAC that would cause KAC to freak out and throw the ping so high and timeout the server and appear like a DDoS?
I can provide the players SteamID in a prvmsg if needed. There is nothing in the KAC logs regarding this player
DDoS / High Ping / Timeout question
-
- Site Admin
- Posts: 1496
- Joined: Sat Jun 07, 2008 11:08 am
- Location: Right behind you....
- Contact:
Re: DDoS / High Ping / Timeout question
No, there is no known issue with KAC that would create this loop.
Its highly likely that the person use a query spammer. This spammer sends query packets to your server at a fast rate and from falsified IPs.
Its highly likely that the person use a query spammer. This spammer sends query packets to your server at a fast rate and from falsified IPs.
- nightrider
- Community Moderator
- Posts: 878
- Joined: Thu Oct 08, 2009 2:38 am
- Location: under a rock
Re: DDoS / High Ping / Timeout question
You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
-
- Posts: 11
- Joined: Thu Sep 16, 2010 1:16 am
Re: DDoS / High Ping / Timeout question
That looks good but is there a linux version?nightrider wrote:You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
- nightrider
- Community Moderator
- Posts: 878
- Joined: Thu Oct 08, 2009 2:38 am
- Location: under a rock
Re: DDoS / High Ping / Timeout question
Query Cache 1.7 - Linux & Windowsmatrixmark wrote:That looks good but is there a linux version?
http://code.google.com/p/querycache/downloads/list
-
- Posts: 11
- Joined: Thu Sep 16, 2010 1:16 am
Re: DDoS / High Ping / Timeout question
Thanks Nightrider :)
- nightrider
- Community Moderator
- Posts: 878
- Joined: Thu Oct 08, 2009 2:38 am
- Location: under a rock
Re: DDoS / High Ping / Timeout question
My pleasure ...