[HyDrAtIc]

Hello.

So, I was thinking about how to solve DDOS problems, so I've thought of this, is it possible to create a timer between each connection to the server from ALL IP's, as an example if you wanna connect and someone else is connecting, you must wait for an example 10 secs or so to connect... Possible or impossible?

[Abagail]

I believe 0.3z has this option in the server.cfg(maxconnectiontime or something?)? How-ever, I suppose this could be created manually using OnIncomingConnection, how-ever I don't know if your theory would work.

See,
https://sampwiki.blast.hk/wiki/OnIncomingConnection

[HyDrAtIc]

Quote:

Originally Posted by Abagail I believe 0.3z has this option in the server.cfg(maxconnectiontime or something?)? How-ever, I suppose this could be created manually using OnIncomingConnection, how-ever I don't know if your theory would work. See, https://sampwiki.blast.hk/wiki/OnIncomingConnection

I don't seem to really get it well, but is it possible to create my idea or not? That's my question.

[Abagail]

Well it is not possible to completely end all ddoss attacks through PAWN as far as I know, how-ever 0.3z offers better control of incoming connections, which could help prevent bot attacks, and more, how-ever full DDOSS protection is highly unlikely.

How-ever, some plug-ins may be able to detect some DDOSS attacks through packet monitoring, how-ever as far as my knowledge goes it's not preventable through scripting.

[NaS]

You cannot end a DDoS attack using the sa-mp server, this has to be done on a lower level (iptables etc).

[ChupaKabras]

You cannot end a DDoS Attack cause the DDoS time is such longer and many connection are created to down your server, if the connection between the server and the stable ip is longer that 200ms, this will make your server lag, and that could make the DDoS stops sometimes, but SA-MP cannot set the timer to 200ms. (I don't really get it)

[DavidKember]

I dont think stopping a DDOs atack is possible.

[Rudy_]

Well, i don't know much about DDoS , But what if the Alot of connections tries to connect at the same (or nearer) time, then make it so in 10 sec only 1 connection?

[Kaperstone]

As I understood, you're looking for something like this ?

Quote:

Adds: 'minconnectiontime (time in milliseconds)' server variable to control the rate which the server accepts connections from newly connecting players. Example: minconnectiontime 1000, the server will accept a new connection every 1 second. If the server does not accept the connection, the connection request will be ignored. It is not recommended that you use this variable unless your server is under a connection flood attack.

https://sampforum.blast.hk/showthread.php?tid=524049

[NaS]

Quote:

Originally Posted by xkirill As I understood, you're looking for something like this ? https://sampforum.blast.hk/showthread.php?tid=524049

That is helping for many player connections, but a DDoS attack is not about the samp server itself, it kinda blocks the whole vps/root with invalid requests on different levels.