CS.RIN.RU - Steam Underground Community
http://cs.rin.ru/forum/

[Problem] HLDS Problem
http://cs.rin.ru/forum/viewtopic.php?f=10&t=60680		 Page 1 of 1
Author:  Bonqe [ Saturday, 04 Feb 2012, 17:23 ]
Post subject:  HLDS Problem
Today some hackers attacked my server. I would be greatful if u guys would help me to solve my problem.

• antidlfile.dll - installed
• sv_allowupload "0"
• AntiCSDos by Shocker - turned on
• RCON pass consists of about 20 simbols
• RCON pass protection cvars
Code: Select all | Line number On/Off | Expand/Contract
  1. sv_rcon_minfailuretime 10 // Number of seconds to track failed rcon authentications
  2. sv_rcon_minfailures 1 // Number of times a user can fail rcon authentication in sv_rcon_minfailuretime before being banned
  3. sv_rcon_maxfailures 3 // Max number of times a user can fail rcon authentication before being banned
  4. sv_rcon_banpenalty 0 // Number of minutes to ban users who fail rcon authentication



First of all, i'v noticed that when some player called Rocky Balbo connects to my server - it crashes. > http://i.minus.com/ioqGlkkNH0d8v.png

Later i'v saw, that if player called AAD3AH (different ip) connects to server - it crashes. Moreover, it writes some lines like "SV_ReadClientMessage: unknown command char (32)" just look at the photo.. > http://i.minus.com/iILZWvV4TXrxt.png

After all i'v saw HLBrute attacks > http://i.minus.com/ib1cvcuzJcHguP.png


When i added these lines to listip.cfg (it's rocky & aad.. ip adressess)
Code: Select all | Line number On/Off | Expand/Contract
  1. addip "0" "78.63.96.78"
  2. addip "0" "84.240.40.35"

and changed my rcon pass crashes stopped.


Any ideas how to protect my server that this problem would not happen again?
Page 1 of 1 All times are UTC + 3 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/