LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 08-16-2012, 11:56 PM   #1
farenheitcx
LQ Newbie
 
Registered: Nov 2011
Posts: 8

Rep: Reputation: Disabled
How to block too many UDP connections to certain ports


Hi guys, I have a dedicated server for Counter Strike, sure you know the game, but my problem is not the game, is about the security of the server.
Today I noticed that my server is under a kind of flood attacks over udp ports, but this not causing high traffic in network bandwith or server resources like CPU or RAM. Otherwise the ports used by the game server have many packets connects at the same time, more than 1000 and that cause high ping response for server status querys.

This is the netstat output:

Code:
udp     5888      0 192.168.0.100:15811       0.0.0.0:*
udp     3680      0 192.168.0.100:15816       0.0.0.0:*
How I can prevent this with iptables? What is the exactly steaps to prevent against this kind of attack? Thanks in adavance
 
Old 08-17-2012, 08:47 AM   #2
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Ubuntu 10.10, Slackware 64-current
Posts: 2,124

Rep: Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776
Game servers can be tricky beasts that are frequently targeted for attacks. Responding to them can be even more tricky, making a simply "do this" answer to your question difficult. My recommendation, assuming you haven't already, would be to review these threads, some of which go into great detail regarding stopping UDP floods on game servers.

http://www.linuxquestions.org/questi...attack-908100/
and
http://www.linuxquestions.org/questi...tables-910971/
 
1 members found this post helpful.
  


Reply

Tags
flood, iptables


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] checking for open ports need ports 5198, 5199 open for UDP raypsi Linux - Security 9 05-22-2012 07:51 PM
UDP Ports open? Brian Murphy Linux - Networking 2 09-18-2011 06:03 PM
Need to block all ports and open only select ports on Ubuntu 7.1 Mr.J Linux - Networking 1 11-18-2008 03:45 AM
UDP ports Khalinsar Linux - Security 1 06-05-2005 01:51 PM
Open UDP ports ArnaudVR Linux - Security 6 06-25-2003 11:43 AM


All times are GMT -5. The time now is 08:57 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration