[-Davee-]

Hi.

My server have big ping attack. I think this is an UDP-FLOOD. My server runing on linux (debian) and I use Config Server Firewall.

I added 2 new rules to my firewall settings,

This is help me? To stop UDP Ping attack?

iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --set
iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j DROP

This is a very big problem for me
All unused ports closed by firewall. And set up ICMP, SYN, flood protection. But I don't have any idea to stop UDP attack...

Thank You,
Davee

[^^ Hello]

Quote:

Originally Posted by Davee. Hi. My server have big ping attack. I think this is an UDP-FLOOD. My server runing on linux (debian) and I use Config Server Firewall. I added 2 new rules to my firewall settings, This is help me? To stop UDP Ping attack? iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --set iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j DROP This is a very big problem for me All unused ports closed by firewall. And set up ICMP, SYN, flood protection. But I don't have any idea to stop UDP attack... Thank You, Davee

i think i can't help you with this, but i think it is good if u shutdown your server for 2/3 days. That must, because then the f*cker who is hacking your server, stops with doing that is he see that the server isn't online. This happend to me to, and it works for me.
cya

[Calgon]

Quote:

Originally Posted by ^^ Hello Quote: Originally Posted by Davee. Hi. My server have big ping attack. I think this is an UDP-FLOOD. My server runing on linux (debian) and I use Config Server Firewall. I added 2 new rules to my firewall settings, This is help me? To stop UDP Ping attack? iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --set iptables -I INPUT -p udp --dport 7780 -m state --state NEW -m recent --update --seconds 10 --hitcount 5 -j DROP This is a very big problem for me All unused ports closed by firewall. And set up ICMP, SYN, flood protection. But I don't have any idea to stop UDP attack... Thank You, Davee i think i can't help you with this, but i think it is good if u shutdown your server for 2/3 days. That must, because then the f*cker who is hacking your server, stops with doing that is he see that the server isn't online. This happend to me to, and it works for me. cya

That's not useful advice. However, this may be of some use:
http://forum.sa-mp.com/index.php?topic=101693.0