Защита Counter Strike Сервера, Методы защиты от различных уязвимостей игровых серверов |
Здравствуйте, гость Вход | Регистрация
Наши новости:
|
|
|
Защита Counter Strike Сервера, Методы защиты от различных уязвимостей игровых серверов |
darko19
|
8.8.2012, 18:03
Сообщение
|
![]() |
philip13579,
Вывод: тупо кинуть в бан этот стимайди? |
|
|
|
darko19
|
9.8.2012, 16:45
Сообщение
|
![]() |
думаю тупо ждать когда сделают так что бы мастерсервера работали на последнем билде
|
|
|
|
va4eslin
|
10.8.2012, 16:45
Сообщение
|
|||
![]() |
![]() Описание: Плагин позволяет зашитить ваш сервер от обновлённого флудера 2.0 Ребята ваше мнение?Будем пробывать?
Отредактировал: mazdan, - 11.8.2012, 20:14
|
|||
|
|
||||
winzh1
|
10.8.2012, 17:00
Сообщение
|
![]() |
![]() Описание: Плагин позволяет зашитить ваш сервер от обновлённого флудера 2.0 Ребята ваше мнение?Будем пробывать? Этой версии почти 1,5 года,пробовал ей поюзать сервер,эффекта вообще 0,разве что на одном хостинге(очень не качественный) вызвал небольшие лаги. ![]() Установлю и настрою FreshBans, DopBan.
Писать в ЛС. |
Поблагодарили 1 раз
|
|
va4eslin
|
11.8.2012, 21:51
Сообщение
|
![]() |
|
|
|
|
Vitaliy
|
12.8.2012, 10:59
Сообщение
|
![]() |
Цитата Защита CS сервера (Обновлена 08.08.12) что обновилось? кто подскажет |
|
|
|
va4eslin
|
12.8.2012, 11:02
Сообщение
|
![]() |
|
|
|
|
dehost
|
12.8.2012, 19:27
Сообщение
|
![]() |
Кстати кого флудят с 2010KOHTEP Настройки Dproto # # General rule for modifying this file: # DONT CHANGE ANYTHING IF YOU DONT KNOW WHAT IT MEANS # # ======================================================== # DPROTO CONFIGURATION # ======================================================== # LoggingMode: # 1 = Console # 2 = Log Files # 3 = Both LoggingMode = 2 # ======================================================== # AUTHID MANAGEMENT # ======================================================== # ClientID types (for cid_* options) # 1: Real (or generated by HW) steam (STEAM_xx:xx:xx) # 2: Real (or generated by HW) valve (VALVE_xx:xx:xx) # 3: STEAM_ by IP # 4: VALVE_ by IP # 5: Deprecated - client will be rejected # 6: reserved for future use # 7: HLTV # 8: STEAM_ID_LAN # 9: STEAM_ID_PENDING # 10: VALVE_ID_LAN # 11: VALVE_ID_PENDING # 12: STEAM_666:88:666 # Use these options to set authid's for clients # for HLTV (default is HLTV [7] ) cid_HLTV = 5 # for p.47 clients that do not support unique id generation (default is STEAM_ID_LAN [8] ) cid_NoSteam47 = 8 # for p.48 clients that do not support unique id generation (default is VALVE_ID_LAN [10] ) cid_NoSteam48 = 5 # For Legit Steam clients (default is real STEAM_xx:xx:xx [1]) cid_Steam = 1 # Client recognized as pending when they sucessfully authorized, but did not get steam id # REMARK: Actually, it got steamid, but it is useless (STEAM_0:0:0 for example) # default is STEAM_ID_PENDGIND [9] cid_SteamPending = 9 # For players having revEmu ( >= 9.74) on client-side: # default is real STEAM_xx:xx:xx [1] cid_RevEmu = 1 # For players having SteamClient 2009 / revEmu > 9.82 on client-side: # default is real STEAM_xx:xx:xx [1] cid_SC2009 = 1 # For players having old revEmu on client-side: # default is real STEAM_xx:xx:xx [1] cid_OldRevEmu = 1 # For players having hCupa's SteamEmu on client-side: # default is real STEAM_xx:xx:xx [1] cid_SteamEmu = 1 # For players having AVSMP (Cracked Steam) on client-side: # default is real STEAM_xx:xx:xx [1] cid_AVSMP = 1 # For SETTI ServerScanner # default is STEAM_xx:xx:xx generated by IP [3] cid_Setti = 3 # For SXEI Clients # default is real STEAM_xx:xx:xx [1] cid_SXEI = 1 # EnableSXEIdGeneration (0 / 1) # Turns on steamid generation based on info sent by sXeI client # Enable this only if you have sXeI server installed! EnableSXEIdGeneration = 0 # SC2009_RevCompatMode (0 / 1) # Enable fix to make steamids generated for SC2009 compatibble with revEmu SC2009_RevCompatMode = 1 # SteamEmuCompatMode (0 / 1) # An analog for eSTEAMATiON's EnforceSteamEmuCompatIDMode option. # Affects only Old RevEmu and SteamEmu emulators. SteamEmuCompatMode = 1 # OldEstCompatMode (0 / 1) # Enables/Disables fix for steamids generated by eST in 0.3.1 version. # Set this to 1 if you want to make steamids generated by eST as in < 0.3.0 versions. OldEstCompatMode = 0 # IPGen_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by IP IPGen_Prefix1 = 0 # IPGen_Prefix2 (int) # STEAM_a:b:c # second prefix (b) for authids generated by IP IPGen_Prefix2 = 4 # Native_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by native auth method (Steam) Native_Prefix1 = 0; # RevEmu_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by Steamclient 2009 SC2009_Prefix1 = 0; # RevEmu_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by RevEmu RevEmu_Prefix1 = 0; # OldRevEmu_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by old RevEmu OldRevEmu_Prefix1 = 0; # SteamEmu_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids generated by SteamEmu SteamEmu_Prefix1 = 0; # SteamEmu_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids assigned for AVSMP Clients (Cracked steam) AVSMP_Prefix1 = 0; # Setti_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids assigned for Setti server scanner Setti_Prefix1 = 0; # SXEI_Prefix1 (int) # STEAM_a:b:c # first prefix (a) for authids assigned for sXeI clients SXEI_Prefix1 = 0; # Note that banid will use steamid WITHOUT any prefixes! # ======================================================== # ATTACKS SUPRESSION # ======================================================== # FakePlayers_ConnectInitiationCheck (seconds) # Sets the time, in seconds, in which client should initiate # game session (in other words, send the "new" command) after it has # been connected. If client did not initiated game session, it will be marked as # fake and kicked. # Default is 6 seconds. # Use 0 to disable this check. FakePlayers_ConnectInitiationCheck = 6 # FakePlayers_ClientValidationCheck (seconds) # Sets the time, in seconds, in which client should answer to random unique command # sent by server. If client did not answered for this command, it will be marked as # fake and kicked. # Default is 8 seconds. # Use 0 to disable this check. FakePlayers_ClientValidationCheck = 8 # FakePlayers_AntiReconnect (0/1) # Enables detection of fakeplayers that reconnects quickly (every < 10 seconds) # before fake players checks have completed. # This check will work only if FakePlayers_ClientValidationCheck and # FakePlayers_ConnectInitiationCheck are enabled. # Default is 1 (ON) FakePlayers_AntiReconnect = 1 # FakePlayers_BanTime (minutes) # Dproto will ban IP spamming fakeplayers for time (in minutes) specified in this variable # use 0 for permanent ban # use negative vaules to disable ban (fake players will only be kicked) FakePlayers_BanTime = 120 # ======================================================== # OTHER STUFF # ======================================================== # DisableNativeAuth (0/1) # Disables valve/steam auth system. # For p.47 Based: Server will not connect to auth servers. # For All: Server will not call authorization functions. # This is a fix for startup freeze for old (p.47) servers. DisableNativeAuth = 0 # ServerInfoAnswerType (0/1) # Sets server answer type for query requests # 0 = New style (Source Engine) # 1 = Old Style (Fix favorites list for p.47 clients) # 2 = Hybrid mode - best solution for now, server is visible anywhere ServerInfoAnswerType = 2 # Game_Name (string) # Sets game name displayed for clients # If Game_Name is empty, native game name will be used Game_Name = # Enables fix for proper player id displaing on HLStats server monitoring # Enable this only if you have HLStats HLStatsPlayerIdFix = 0 # ExportVersion (0 / 1) # Enables/Disables exporting of dp_version cvar # 1 = dp_version cvar will be exported to server rules. It will be visible in server monitoring tools (like HLSW) # 0 = dp_version cvar will not be exported to server rules. ExportVersion = 1 # HLTVExcept_IP (ip addr) # HLTV from this IP will be able to join the server even if cid_HLTV is set to 5 (deprectaed) HLTVExcept_IP = 127.0.0.1 На посещаемость не повлияло, а флудер заглох Floodblocker - защита HLDS от FPlayers Flood не? ![]() Золотое правило нравственности:
"Относись к людям так, как хочешь, чтобы относились к тебе." |
|
|
|
dehost
|
12.8.2012, 20:00
Сообщение
|
![]() |
dehost, а на что твой линк я понятия не имею (так открой глаза) я у тебя и спрашиваю это не проще поставить чем менять настройки в dproto Floodblocker - защита HLDS от FPlayers Flood Плагин исправляет следующие усвояемости: Флуд подключений фейковых клиентов. (fake players flood) Уезвяемость движка, которая позволяет скачивать любые файлы с сервера, как server.cfg или другие критические файлы ![]() Золотое правило нравственности:
"Относись к людям так, как хочешь, чтобы относились к тебе." |
|
|
|
darko19
|
12.8.2012, 20:22
Сообщение
|
![]() |
dehost,
кого флудят с 2010KOHTEP |
|
|
|
dehost
|
12.8.2012, 20:59
Сообщение
|
![]() |
Код L 08/12/2012 - 22:40:23: "xaxaxa<254><VALVE_ID_PENDING><>" connected, address "77.76.184.2:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxa from server Reason: Bad command character in client command L 08/12/2012 - 22:40:25: "xaxaxaxaxaxa<255><VALVE_ID_PENDING><>" connected, address "77.77.57.184:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxaxa from server Reason: Bad command character in client command L 08/12/2012 - 22:40:25: "xaxaxa<256><VALVE_ID_PENDING><>" connected, address "77.76.184.2:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxa from server Reason: Bad command character in client command L 08/12/2012 - 22:40:26: "xaxaxaxaxasdasdas<257><VALVE_ID_PENDING><>" connected, address "77.77.57.184:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxasdasdas from server Reason: Bad command character in client command L 08/12/2012 - 22:40:27: "xaxaxa<258><VALVE_ID_PENDING><>" connected, address "77.70.119.59:60234" Dropped xaxaxa from server Reason: Client sent 'drop' L 08/12/2012 - 22:40:28: "xaxaxaxaxaxa<259><VALVE_ID_PENDING><>" connected, address "77.76.184.2:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxaxa from server Reason: Bad command character in client command L 08/12/2012 - 22:40:30: "xaxaxaxaxasdasdas<260><VALVE_ID_PENDING><>" connected, address "77.76.184.2:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxasdasdas from server Reason: Bad command character in client command L 08/12/2012 - 22:40:34: "xaxaxaxaxaxa<261><VALVE_ID_PENDING><>" connected, address "77.70.119.59:60234" Dropped xaxaxaxaxaxa from server Reason: Client sent 'drop' L 08/12/2012 - 22:40:34: "xaxaxaxaxaxa<262><VALVE_ID_PENDING><>" connected, address "77.77.57.184:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxaxa from server Reason: Bad command character in client command L 08/12/2012 - 22:40:36: "xaxaxaxaxasdasdas<263><VALVE_ID_PENDING><>" connected, address "77.77.57.184:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxaxaxasdasdas from server Reason: Bad command character in client command L 08/12/2012 - 22:40:37: "xaxaxa<264><VALVE_ID_PENDING><>" connected, address "92.53.82.178:60234" SV_ReadClientMessage: unknown command char (46) Dropped xaxaxa from server Reason: Bad command character in client command товарищ пишет, флуд идёт. Зашёл на сервер а там пинг до 350 ++++ это часть логов только ![]() Золотое правило нравственности:
"Относись к людям так, как хочешь, чтобы относились к тебе." |
|
|
|
darko19
|
12.8.2012, 21:02
Сообщение
|
![]() |
Тогда не знаю даже
|
|
|
|
dehost
|
12.8.2012, 21:07
Сообщение
|
![]() |
Тогда не знаю даже очень жестко((( rcon говорит нету 48/1.1.2.6 5758 secure (10) DPROTO 0.9.179 сейчас сделал ему только # for HLTV (default is HLTV [7] cid_HLTV = 5 # for p.47 clients that do not support unique id generation (default is STEAM_ID_LAN [8] ) cid_NoSteam47 = 5 # for p.48 clients that do not support unique id generation (default is VALVE_ID_LAN [10] ) cid_NoSteam48 = 5 онлайн упал сразу. ![]() Золотое правило нравственности:
"Относись к людям так, как хочешь, чтобы относились к тебе." |
|
|
|
coolman
|
13.8.2012, 5:58
Сообщение
|
|
|
|
|
|
|
dehost
|
13.8.2012, 10:51
Сообщение
|
![]() |
почему то у меня тоже самое и все нормально сейчас всё норм, вход без эмулятора запрещён. он до этого ему добавлялся в skype и говорил дай 200 руб якобы и флуд прекратиться ![]() Золотое правило нравственности:
"Относись к людям так, как хочешь, чтобы относились к тебе." |
|
|
|
mazdan
|
13.8.2012, 14:13
Сообщение
|
![]() ![]() |
сейчас всё норм, вход без эмулятора запрещён. хах =) прям попрошайничество :Dон до этого ему добавлялся в skype и говорил дай 200 руб якобы и флуд прекратиться p.s. обновил шапку т.к. было добавлено правило от сниф флуда.
Отредактировал: mazdan, - 13.8.2012, 14:44
![]() Не пишите мне в ЛС. Пишите на почту. В ЛС я пропускаю сообщения.
|
|
|
|
va4eslin
|
13.8.2012, 16:00
Сообщение
|
|||
![]() |
Такое решение предложили.От последнева флуда.Отписываемся кто будет пробывать,и что получиться. Я пытаюсь разобраться.
1. Установить свежую версию dproto_ v0.9.179 2. Использовать а. для windows фаирвол и закрыть порты последние порты(пример из iptables для раутера.) Скрытый текст iptables -I FORWARD -p udp -m udp --sport 7777 -j DROP iptables -I FORWARD -p udp -m udp --sport 3074 -j DROP iptables -I FORWARD -p udp -m udp --sport 7786 -j DROP iptables -I FORWARD -p udp -m udp --sport 10101 -j DROP iptables -I FORWARD -p udp -m udp --sport 7788 -j DROP iptables -I FORWARD -p udp -m udp --sport 1000 -j DROP iptables -I FORWARD -p udp -m udp --sport 3000 -j DROP iptables -I FORWARD -p udp -m udp --sport 9355 -j DROP iptables -I FORWARD -p udp -m udp --sport 2010 -j DROP iptables -I FORWARD -p udp -m udp --sport 50016 -j DROP iptables -I FORWARD -p udp -m udp --sport 80 -j DROP iptables -I FORWARD -p udp -m udp --sport 8080 -j DROP iptables -I FORWARD -p udp -m udp --sport 25865 -j DROP iptables -I FORWARD -p udp -m udp --sport 58310 -j DROP iptables -I FORWARD -p udp -m udp --sport 17092 -j DROP iptables -I FORWARD -p udp -m udp --sport 1461 -j DROP iptables -I FORWARD -p udp -m udp --sport 37589 -j DROP iptables -I FORWARD -p udp -m udp --sport 12991 -j DROP iptables -I FORWARD -p udp -m udp --sport 5113 -j DROP iptables -I FORWARD -p udp -m udp --sport 28960 -j DROP iptables -I FORWARD -p udp -m udp --sport 6005 -j DROP iptables -I FORWARD -p udp -m udp --sport 5127 -j DROP iptables -I FORWARD -p udp -m udp --sport 7803 -j DROP iptables -I FORWARD -p udp -m udp --sport 43594 -j DROP iptables -I FORWARD -p udp -m udp --sport 4372 -j DROP iptables -I FORWARD -p udp -m udp --sport 31755 -j DROP iptables -I FORWARD -p udp -m udp --sport 27015 -j DROP iptables -I FORWARD -p udp -m udp --sport 8074 -j DROP iptables -I FORWARD -p udp -m udp --sport 9987 -j DROP iptables -I FORWARD -p udp -m udp --sport 25250 -j DROP iptables -I FORWARD -p udp -m udp --sport 62531 -j DROP iptables -I FORWARD -p udp -m udp --sport 52429 -j DROP iptables -I FORWARD -p udp -m udp --sport 22 -j DROP iptables -I FORWARD -p udp -m udp --sport 12345 -j DROP iptables -I FORWARD -p udp -m udp --sport 44560 -j DROP iptables -I FORWARD -p udp -m udp --sport 3070 -j DROP iptables -I FORWARD -p udp -m udp --sport 9696 -j DROP iptables -I FORWARD -p udp -m udp --sport 53 -j DROP iptables -I FORWARD -p udp -m udp --sport 88 -j DROP iptables -I FORWARD -j DROP -s 78.85.0.0/32 iptables -I FORWARD -j DROP -s 46.4.14.146 iptables -I FORWARD -j DROP -s 67.228.159.54 iptables -I FORWARD -j DROP -s 87.209.155.122 iptables -I FORWARD -j DROP -s 89.184.66.187 iptables -I FORWARD -j DROP -s 91.238.102.71 iptables -I FORWARD -j DROP -s 95.211.153.82 iptables -I FORWARD -j DROP -s 172.0.0.0/32 iptables -I FORWARD -j DROP -s 10.0.0.0/32 iptables -I FORWARD -j DROP -s 188.40.48.149 iptables -I FORWARD -j DROP -s 208.167.241.182 iptables -I FORWARD -j DROP -s 213.141.134.237 iptables -I FORWARD -j DROP -s 94.23.117.105 iptables -I FORWARD -j DROP -s 89.28.42.226 iptables -I FORWARD -j DROP -s 69.35.15.191 использовать снифер для определения атаки Microsoft Network Monitor 3.4 правило(фильтер) для опеределения атаки ContainsBin(FrameData, Hex, "FF FF FF FF 56")
Отредактировал: mazdan, - 14.8.2012, 19:14
|
|||
|
|
||||
lanik
|
13.8.2012, 16:13
Сообщение
|
|
|
Это от 2010КОНТЕР?
|
|
|
|
va4eslin
|
13.8.2012, 16:15
Сообщение
|
![]() |
|
|
|
|
![]() ![]() |