SA-MP Forums Archive
Is it the attack? - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Is it the attack? (/showthread.php?tid=559145)



Is it the attack? - Urukhay - 21.01.2015

server_log says: Warning: client exceeded 'ackslimit' 5.129.201.72:52669 (7094364) Limit: 3000/sec
then all players were disconnected with reason: 0 (Timeout/Crash), but server was active


Re: Is it the attack? - bartekdvd - 21.01.2015

Quote:
Originally Posted by Urukhay
View Post
server_log says: Warning: client exceeded 'ackslimit' 5.129.201.72:52669 (7094364) Limit: 3000/sec
then all players were disconnected with reason: 0 (Timeout/Crash), but server was active
This is probably one of those spoofed ip attacks + acks raknet layer attack. Have you tried this plugin to prevent spoofed connections?:
https://sampforum.blast.hk/showthread.php?tid=551128

You can also set ackslimit to lower value in order to reduce cpu usage during attack.


Re: Is it the attack? - Urukhay - 21.01.2015

This attack is not - "Full attack"
When i was connected server said: "The server didn't respond"


Re: Is it the attack? - bartekdvd - 21.01.2015

Quote:
Originally Posted by Urukhay
View Post
This attack is not - "Full attack"
When i was connected server said: "The server didn't respond"
I know. This plugin not only protects against "server full" attack, but also protect you from spoofed clients. Your server didn't respond, because it was probably attacked with many different ip addressess and their target was raknet acks system wich is vulnerable enough to freeze/hang server for a while, that's why your server doesn't crashed and all players timed out.


Re: Is it the attack? - Urukhay - 21.01.2015

But why there is not official fix?


Re: Is it the attack? - bartekdvd - 21.01.2015

There is: 0.3.7 version of sa-mp has this kind of protection or better one, but it's not released yet.


Re: Is it the attack? - Urukhay - 21.01.2015

Why 0.3z-R4 has not this protection?


Re: Is it the attack? - MarcoMardel - 12.02.2015

We already have the same problem on 0.3.7-RC1 , got the message, the server gets shutting down. I wrote a new topic about it.


Re: Is it the attack? - Jake187 - 12.02.2015

what OS are u using?