Offline
Want to know if you know any good method to help on DDoS attacks.
Forum
CS2D
Servers firewall Linux
firewall Linux
15 replies
1 
Want to know if you know any good method to help on DDoS attacks.
But linux Firewall is iptables.
about iptables 
ead: I already inserted a url in your old thread 4 the easiest way to drop udp packets! 1
iptables -A OUTPUT -p tcp -m length --length 0:28 -j DROP
1
iptables -A OUTPUT -p udp -m length --length 0:28 -j DROP
1
iptables -A FORWARD -p tcp -m length --length 0:28 -j DROP
1
iptables -A FORWARD -p udp -m length --length 0:28 -j DROP
ead: CS2D only use UDP http://www.cs2d.com/security.php
It is very easy for attackers to kill your server if you aren't using this rule.
The other rules you posted are pointless. Especially the TCP rules. CS2D servers don't use TCP and the TCP header also doesn't have a size of 28 bytes so the 0:28 size range is simply wrong. The UDP output/forward rules seem okay but they are probably not necessary.
DC:@
sheeL: Thank'm already using these and other rules such as this to allow ping.
1
iptables -A INPUT -d IP Address -p icmp -j ACCEPT
This rule and good
it is the dalay time between the moment when you send the UDP packet and the moment when you receive it .
aka Round-trip delay time
tontonEd: But it helps right friend?
Wishes everyone a happy 2015!
1
iptables -A INPUT -p tcp --syn -m limit --limit 1/s --limit-burst 8 -j DROP
I tried to use the rule that the @
sheeL: spent but it blocks my FTP
Then I have to take it to I access the FTP back.I think this rule and good
that's what is happening in pratic:
Time1 - cs2d client : hey server here?
Time2 - cs2d client : what's your name?
Time3 - cs2d server : yes
Time4 - cs2d server : my name is blabla
latence = Time3 - Time1
ead: As sheeL and me already stated: CS2D does NOT use TCP! So ANY rule which contains "-p tcp" will NOT affect CS2D. Neither in a good nor in a bad way. So if you're just talking about securing CS2D in this thread then you can simply skip and ignore ALL rules which contain "-p tcp". They are unrelated and won't help. Only rules which contain "-p udp" can affect CS2D. 1