Re: [hlds_linux] DoS Attack Fix Plugin Released

I was hoping it would work on CSS even though it was written for tf. I
made the pertinent changes in the .vdf file, but it does not seem to
load up. I get no error messages.

> Message: 1
> Date: Wed, 21 Jan 2009 21:14:06 +0100
> From: Pawel <trammp (AT) gmail (DOT) com>
> Subject: Re: [hlds_linux] DoS Attack Fix Plugin Released
> To: Half-Life dedicated Linux server mailing list
> <hlds_linux (AT) list (DOT) valvesoftware.com>
> Message-ID:
> <80894ffe0901211214i1b297e2cp6b58b04a98477dae (AT) mail (DOT) gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> How about CS:S?
> Will it be working?

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
Read more on: : i3D.net Game Forums /hlds-valve-linux-newsletter/47907-re-hlds_linux-dos-attack-fix-plugin-released.html
http://list.valvesoftware.com/mailma...nfo/hlds_linux

>> Date: Tue, 20 Jan 2009 14:10:38 -0600
>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE!!!
Read more on: : i3D.net Game Forums http://forum.i3d.net/showthread.php?t=47907
>> hello neph we tested this script one he gives a error
>>
>> iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 28 -j
>> DROP
>> ->>> iptables: No chain/target/match by that name
>>
>> can u help me ?

>What is the output of lsmod?

I am having the same problem. I _do_ have an INPUT and _do_ have a
DROP section and am already using iptables with these sections for
other things.
I tried messing with the command a bit to see what is wrong. The -p
udp -m udp --dport 27015 options work fine.
I tried the command like this to see what error I get:
/usr/sbin/iptables -A INPUT -p udp -m udp --dport 27015 -m length -j DROP
and it replies:iptables v1.3.6: length: You must specify `--length'
so it seems like it will work. But when I add --length 28 I get the
same error as the others:

/usr/sbin/iptables -A INPUT -p udp -m udp --dport 27015 -m length
--length 28 -j DROP
iptables: No chain/target/match by that name

Since I can't use the TF2 plugin I'd like to get iptables to work.
Here is my lsmod output:

Module Size Used by
ipt_LOG 6784 5
xt_tcpudp 4096 35
iptable_filter 3328 1
ip_tables 18856 1 iptable_filter
x_tables 17032 3 ipt_LOG,xt_tcpudp,ip_tables
i2c_viapro 9496 0
via_velocity 30404 0
i2c_core 23296 1 i2c_viapro
sata_sis 8132 0
pata_sis 14340 1 sata_sis

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailma...nfo/hlds_linux

The iptables startup script combined with the iptables command
*should* autoload necessary modules as they're asked for.

"-m length" pulls in the "xt_length" module, so you might not have
this module supported, or your scripts might not be autoloading it.

- Neph

On Thu, Jan 22, 2009 at 11:50 AM, Chris <yoitguy (AT) gmail (DOT) com> wrote:
>>> Date: Tue, 20 Jan 2009 14:10:38 -0600
>>> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE!!!
>>> hello neph we tested this script one he gives a error
>>>
>>> iptables -A INPUT -p udp -m udp --dport 27015 -m length --length 28 -j
>>> DROP
>>> ->>> iptables: No chain/target/match by that name
>>>
>>> can u help me ?
>
>>What is the output of lsmod?
>
> I am having the same problem. I _do_ have an INPUT and _do_ have a
> DROP section and am already using iptables with these sections for
> other things.
> I tried messing with the command a bit to see what is wrong. The -p
> udp -m udp --dport 27015 options work fine.
> I tried the command like this to see what error I get:
> /usr/sbin/iptables -A INPUT -p udp -m udp --dport 27015 -m length -j DROP
> and it replies:iptables v1.3.6: length: You must specify `--length'
> so it seems like it will work. But when I add --length 28 I get the
> same error as the others:
>
> /usr/sbin/iptables -A INPUT -p udp -m udp --dport 27015 -m length
> --length 28 -j DROP
> iptables: No chain/target/match by that name
>
> Since I can't use the TF2 plugin I'd like to get iptables to work.
> Here is my lsmod output:
>
> Module Size Used by
> ipt_LOG 6784 5
> xt_tcpudp 4096 35
> iptable_filter 3328 1
> ip_tables 18856 1 iptable_filter
> x_tables 17032 3 ipt_LOG,xt_tcpudp,ip_tables
> i2c_viapro 9496 0
> via_velocity 30404 0
> i2c_core 23296 1 i2c_viapro
> sata_sis 8132 0
> pata_sis 14340 1 sata_sis
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, please visit:
> http://list.valvesoftware.com/mailma...nfo/hlds_linux
>

_______________________________________________
Read more on: : i3D.net Game Forums http://forum.i3d.net/showthread.php?t=47907
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailma...nfo/hlds_linux

On Thu, Jan 22, 2009 at 4:47 PM, Nephyrin Zey <Nephyrin (AT) doublezen (DOT) net> wrote:
> The iptables startup script combined with the iptables command
> *should* autoload necessary modules as they're asked for.
>
> "-m length" pulls in the "xt_length" module, so you might not have
> this module supported, or your scripts might not be autoloading it.

In particular:
ls -l /lib/modules/`uname -r`/kernel/net/netfilter/xt_length.*

Note that uses 'backticks' not single quote. Typically located on the
tilde (~) key in a full size US QWERTY keyboard.
Read more on: : i3D.net Game Forums http://forum.i3d.net/showthread.php?t=47907

BTW as covered before, remove the "-m udp" which isn't supported,
because you include '-p udp' which matches UDP packets.

-Michael

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailma...nfo/hlds_linux

>On Thu, Jan 22, 2009 at 4:47 PM, Nephyrin Zey <Nephyrin at doublezen.net> wrote:
>> The iptables startup script combined with the iptables command
>> *should* autoload necessary modules as they're asked for.
>>
>> "-m length" pulls in the "xt_length" module, so you might not have
>> this module supported, or your scripts might not be autoloading it.
>
>In particular:
> ls -l /lib/modules/`uname -r`/kernel/net/netfilter/xt_length.*
>
> Note that uses 'backticks' not single quote. Typically located on the
> tilde (~) key in a full size US QWERTY keyboard.
>
> BTW as covered before, remove the "-m udp" which isn't supported,
>because you include '-p udp' which matches UDP packets.

Thanks fellas. The module was not in that directory so I recompiled
the kernel with
that module turned on and it works great now!

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailma...nfo/hlds_linux