SA-MP Forums

Go Back   SA-MP Forums > Search Forums

Showing results 1 to 25 of 36
Search took 0.00 seconds.
Search: Posts Made By: Ubi
Forum: Server Support 19/06/2019, 09:48 AM
Replies: 13
Views: 2,341
Posted By Ubi
Re: Server exploit?

Yeah, there is a some kind of new exploit and it has NOTHING to "OVH Game" etc. Please check yours PM.
Forum: Server Support 17/06/2019, 09:06 AM
Replies: 3
Views: 368
Posted By Ubi
Re: Random server crash

If it's a linux server then run it through GDB, and type "bt" after the crash. It should give you backtrace.
Forum: Server Support 17/06/2019, 01:18 AM
Replies: 3
Views: 368
Posted By Ubi
Re: Random server crash

Please use crashdetect and provide backtrace here.
I've done some research and it looks like new RakNet exploit. The attacker sends ID_DISCONNECTION_NOTIFICATION and somewhere in the handler the...
Forum: Server Support 15/04/2019, 12:23 AM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

Yeah, we (as a hosting company) are using such protection for quite a long time but i'm pointing to something else. Disabling query limiting at all (player packets especially) might result in...
Forum: Server Support 14/04/2019, 10:59 PM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

You didn't get my point. I'm talking about traffic reflection which might lead to server shutdown by OVH (or other provider) system due to high OUTGOING traffic (it has nothing to ovh game and any...
Forum: Server Support 14/04/2019, 07:49 PM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

I wouldn't recommend setting it to -1 because bouncing "players" packets might generate huge outgoing traffic (reflected). Your provider (e.g. OVH) may block your server due to outgoing attack which...
Forum: Server Support 31/03/2019, 01:49 AM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

Actually the plugin is working well but it's not a magic solution. It just removes SOME(!) internal query limits and that's all. If you are still facing some problems, be sure to check if you (or...
Forum: Server Support 25/03/2019, 12:19 AM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

0.3.7 R2-2 version: https://ubi.livs.pl/samp/samp_prot_ver3_s.zip
Forum: Server Support 24/03/2019, 12:39 AM
Replies: 85
Views: 55,305
Posted By Ubi
Re: Servers are getting attacked

Here is the source code: https://ubi.livs.pl/samp/samp_prot_ver2_s.zip
Forum: Server Support 09/09/2017, 08:21 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Server browser uses small packets for communication. In-game data can be large and it can saturate your connection/cause other problems if your connection is unstable.
Forum: Server Support 04/09/2017, 11:18 AM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

It depends. Country restriction will work in most cases by minimising impact. It can be difficult to achieve in case you're from country where the spoofed ips comes from. Second solution is just BGP...
Forum: Server Support 02/09/2017, 09:12 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

This is different problem and it can be fixed by samp.exe (browser) update. But it's not possible without changing query system concept.
Forum: Server Support 02/09/2017, 04:16 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

This will not work with this spoof attack.
Forum: Server Support 02/09/2017, 02:48 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Maybe you combined it with latest Kalcor updates? Make sure your samp binary is "0.3.7 R2-1" (linux) or "0.3.7 R2-1-1" (windows). It may also interfere with plugins like "fixes", "YSF" or any other...
Forum: Server Support 02/09/2017, 02:40 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Well.. It's not possible. It can cause high CPU usage because it disables query limit for some requests, but there are no memory leaks etc. Look at the source. I've just simply nop'ed two "jne"...
Forum: Server Support 02/09/2017, 02:24 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

As stated before, here is the source code of my plugin for those interested in (someone else released similar plugin with source, so there's no point of hiding it):...
Forum: Server Support 30/08/2017, 01:57 PM
Replies: 46
Views: 10,005
Posted By Ubi
Re: Firewall Cookie Flood Connection

There's no point of blocking cookie request (maybe small). Cookie system is protection by itself so let it respond to each request. Just disable cookie logging and that's all. Main problem is in the...
Forum: Server Support 30/08/2017, 01:52 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

It's not CPU leak. Please read README. Responding to each packet (without limits) may increase CPU usage. Someone released plugin which disables query limit and redirects it to special callback (I...
Forum: Server Support 29/08/2017, 12:19 AM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

That's why I removed limit only for "i" and "p" requests which are relatively small. But this is still dangerous in some cases.
Forum: Server Support 28/08/2017, 11:46 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

I know it and that's why I'm warning about it in README and posts here. Disabling the limit makes filtering such attacks easier, but server shouldn't be left without any firewall on-top (there's a...
Forum: Server Support 28/08/2017, 06:19 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Show me your config (server.cfg) file (without passwords ofc).

//edit: You probably disabled "concookies". Please enable it.
Forum: Server Support 28/08/2017, 05:39 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Virustotal as a confirmation: https://www.virustotal.com/#/file-analysis/MzgwOWM5ODBjOWRmZmFkZGI4ZWVkN2E0MWM5ZGZmMTQ6MTUwMzkzNzc1OA==
Forum: Server Support 28/08/2017, 05:18 PM
Replies: 6
Views: 1,365
Posted By Ubi
Re: Query attack

Please see http://forum.sa-mp.com/showpost.php?p=3920488&postcount=268
Forum: Server Support 28/08/2017, 05:15 PM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

Please don't combine regular volumetric DDoS attacks with connection flood (cookie) and query flood in this thread.



It's up to you. I understand your fears.



I don't think they will do...
Forum: Server Support 28/08/2017, 10:50 AM
Replies: 422
Views: 928,138
Posted By Ubi
Re: Connection flood

I was thinking about releasing source code, but it's too dangerous. This plugin should be used WITH MIND.. The internal limit is originally placed for some reasons and removing it opens new holes...
Showing results 1 to 25 of 36

 

All times are GMT. The time now is 08:17 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.