[Kalcor]

Quote:

Originally Posted by Sixtar Attack still remaining. I think, it's not botnet. Ips not repeat. I wrote php script for fetching IP adress, i was banned 17000 subdomains, but ip's still not repeats, attack continues.

The best thing you could do for now is write a filter script to detect connection flood in OnIncomingConnection and use SendRconCommand to set 'minconnectiontime' to 1000, then SendRconCommand to set 'minconnectiontime' to 0 on a 5 minute timer so it resets.

Or you can just do it manually while being attacked: /rcon minconnectiontime 1000. After 5-10 minutes /rcon minconnectiontime 0.

If your server doesn't restart/gmx very often you could potentially use minconnectiontime of 500 all the time. The worst thing that would happen is that players might see the "Server did not respond. Retrying.." message while connecting - if they connected at the exact same second as someone else.

A proper fix for this attack (that doesn't require the server owner to do anything) would require both a client and server update - which isn't on the cards right now.