Hello everyone...
I've been suffering from a problem since the last 2 days.. I'm running a counter-strike 1.6 server using dproto version 0.9.87 on windows 7.
Someone is DOSing / flooding my server.. The pings go very high and finally the server crashes.
In the server console [hlds.exe], I see thousands of messages similiar to this:
[DProto] traffic temporary blocked from 212.42.33.5 for flooding
[DProto] traffic temporary blocked from 84.85.31.8 for flooding
[DProto] traffic temporary blocked from 198.4.36.15 for flooding..etc..etc
I use a network sniffing program, and I see that thousands of UDP packets are sent to my server's port which is 27016 from different ip addresses. The content of the packets are sometimes rubbish, and sometimes long strings including "Call of duty" in the content..
Like someone's querying my server ? and sometimes the packets contain a very long message full of the word "Disconnect... disconnect..disconnect...disconnect..".. nearly all the packets start with the following sentence "Status response" in the content
The problem is the ip address of the attacker keeps changing.. and this continues until the server finally crashes.
UPDATE:
Checking the contents of the UDP packets that I'm receiving, i strangely saw that all the UDP packets contain Call of duty server details.. For example:
....statusResponse
\fs_game\mods/promodlive211\g_compassShowEnemies\0\g_gametype\dom\gamename\Call of Duty 4\mapname\mp_crash\protocol\6\shortversion\1.7\sv_allowAnonymous\0\sv_disableClientConsole\0\sv_floodprotect\4\sv_hostname\^1#^7We are ^7BACK^12^7BASH ^1| ^7www^1.^7BACK^12^7BASH^1.^7clan7^1.^7de ^1| ^7Stream On ^1# @teamplay.de\sv_maxclients\12\sv_maxPing\0\sv_maxRate\25000\sv_minPing\0\sv_privateClients\0\sv_punkbuster\1\sv_pure\1\sv_voice\0\ui_maxclients\12\pswrd\1\mod\1
....statusResponse
\fs_game\mods/promodlive211\g_compassShowEnemies\0\g_gametype\dom\gamename\Call of Duty 4\mapname\mp_crash\protocol\6\shortversion\1.7\sv_allowAnonymous\0\sv_disableClientConsole\0\sv_floodprotect\4\sv_hostname\^1#^7We are ^7BACK^12^7BASH ^1| ^7www^1.^7BACK^12^7BASH^1.^7clan7^1.^7de ^1| ^7Stream On ^1# @teamplay.de\sv_maxclients\12\sv_maxPing\0\sv_maxRate\25000\sv_minPing\0\sv_privateClients\0\sv_punkbuster\1\sv_pure\1\sv_voice\0\ui_maxclients\12\pswrd\1\mod\1
any solutions would be appreciated.
Thanks
