[Ubi]

Quote:

Originally Posted by Kalcor You can disable it if you want but I wouldn't recommend it. That limit is there for a reason. The SA-MP server is answering those query requests which means the spoofed IPs are going to recieve traffic from your server when they never requested it. If your server sends packets to too many different IPs, eventually you'll get an abuse complaint. [...]

I know it and that's why I'm warning about it in README and posts here. Disabling the limit makes filtering such attacks easier, but server shouldn't be left without any firewall on-top (there's a risk of bouncing attack/self-ddos as you said). This attack is quite small, so there's only little traffic outgoing and that's why disabling limit works. Anyway it shouldn't be left as is.

You can add some kind of cookie system inside query mechanism, but it's still not ideal (as you said).

Quote:

Originally Posted by Kalcor I think it's safe to disable the flood protection on the smaller query packets, which would make the attack less effective. But like I said, nothing I add to the server code can magically stop IP spoofing and packet floods.

And that's what my plugin exactly does. Anyway config option should be added internally (like in source games etc.).