[DJ_Shocker]

Is anyone experiencing or aware of a new server exploit that causes massive lag and in few instances, crashes?

Basically, what's going on is there are several sa-mp servers hosted on one machine, but only one experiences random massive lag, even with only 4 people on it.

For example, this morning there were over 20 people on the server, everything was fine. Then, suddenly, massive lag which renders the server pretty much unplayable. It's not a DDOS attack. The server is not using too much resources, it's normal.

All other servers are running normal on this machine.

[CePaX]

and I have this problem

messageholelimit 1250 in server.cfg, fix.

[niCe]

I can also confirm the problems with my servers. Suddenly the server uses 100% of CPU, no players can't connect to it. Only termination of process in SSH (SIGKILL) helps. I tried setting messageholelimit to 1000, didn't help though.

[d0]

Try this for now:

1.) /rcon messageholelimit 1250 (can be lower too if it's still not working)

2.) IPtable firewall rule: (blocks the current attack tool)

Code:

iptables -A INPUT -p udp --match length --length 604:608 -j DROP

[DJ_Shocker]

Quote:

Originally Posted by d0 Try this for now: 1.) /rcon messageholelimit 1250 2.) IPtable firewall rule: (blocks the current attack tool) Code: iptables -A INPUT -p udp --match length --length 604:608 -j DROP

We'll give this a shot. Thanks d0! I'll post back if this resolves it.

[Jimmy0wns]

Had the same as well, we'll try that out 'd0'.

[linuxthefish]

Quote:

Originally Posted by d0 IPtable firewall rule: (blocks the current attack tool) Code: iptables -A INPUT -p udp --match length --length 604:608 -j DROP

This helps, the message limit thing does not, even at low numbers like 500. Thanks.

[d0]

Quote:

Originally Posted by linuxthefish This helps, the message limit thing does not, even at low numbers like 500. Thanks.

it does help for something else, just use it for now


Fix -:

Quote:

Originally Posted by d0 Try this for now: 1.) /rcon messageholelimit 1250 (can be lower too if it's still not working) 2.) IPtable firewall rule: (blocks the current attack tool) Code: iptables -A INPUT -p udp --match length --length 604:608 -j DROP

[DEMON91052]

does not work

[cm666]

Quote:

Originally Posted by DEMON91052 does not work

me to. My server use CPU 100%