LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-26-2017, 09:56 PM   #1
Crey
LQ Newbie
 
Registered: Dec 2017
Posts: 12

Rep: Reputation: Disabled
i need iptables to protect my server please help me


Hello,
I Have Vps :Linux Debian 7x64 VPS For Game
I used tcpdump command to get the details and here are a portion of the results :
Please help me

Packet length is 15 according to tcpdump:

Code:
09:41:24.828327 IP 160.178.202.245.7130 > 217.182.38.3.27015: UDP, length 9
09:41:25.106254 IP 104.210.157.84.51167 > 217.182.38.x.27015: UDP, length 23
09:41:26.106112 IP 104.210.157.84.57081 > 217.182.38.x.27015: UDP, length 23
09:41:27.106337 IP 104.210.157.84.62835 > 217.182.38.x.27015: UDP, length 23
09:41:27.479291 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 25
09:41:27.523897 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:27.566177 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:28.104669 IP 104.210.157.84.52435 > 217.182.38.x.27015: UDP, length 23
09:41:29.106237 IP 104.210.157.84.58537 > 217.182.38.x.27015: UDP, length 23
09:41:29.938863 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 25
09:41:29.969873 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:30.021190 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:30.105351 IP 104.210.157.84.64806 > 217.182.38.x.27015: UDP, length 23
09:41:31.104946 IP 104.210.157.84.54407 > 217.182.38.x.27015: UDP, length 23
09:41:32.104917 IP 104.210.157.84.60731 > 217.182.38.x.27015: UDP, length 23
09:41:32.781839 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 25
09:41:32.812665 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:32.855340 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:33.104803 IP 104.210.157.84.50561 > 217.182.38.x.27015: UDP, length 23
09:41:34.106312 IP 104.210.157.84.56366 > 217.182.38.x.27015: UDP, length 23
09:41:35.105025 IP 104.210.157.84.62942 > 217.182.38.x.27015: UDP, length 23
09:41:35.486364 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 25
09:41:35.510774 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:35.555378 IP 160.178.202.245.7130 > 217.182.38.x.27015: UDP, length 9
09:41:36.105584 IP 104.210.157.84.52951 > 217.182.38.x.27015: UDP, length 23
Please help me
I do not understand in this much thing , I just want iptables to block These attacks , thanks to all <3
VPS Game (Anti DDoS) (Game Server Cs 1.6)
 
Old 12-26-2017, 10:11 PM   #2
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,345
Blog Entries: 28

Rep: Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145Reputation: 6145
I would suggest that you install ufw or gufw. ufw is command line; gufw is GUI. They are very user-friendly frontends for iptables.

They should be in the repos.
 
Old 12-27-2017, 03:43 AM   #3
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Ah, that's probably traffic to the listening port of your CounterStrike server.
Block those and you'll just be playing with yourself ...
 
Old 12-27-2017, 03:49 AM   #4
Crey
LQ Newbie
 
Registered: Dec 2017
Posts: 12

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by frankbell View Post
I would suggest that you install ufw or gufw. ufw is command line; gufw is GUI. They are very user-friendly frontends for iptables.

They should be in the repos.
Can you take care fix this flood I do not understand linux I want anti iptable my server is down :/
go look screenshot attack : https://i.imgur.com/DZpTSyp.png
 
Old 12-27-2017, 03:52 AM   #5
Crey
LQ Newbie
 
Registered: Dec 2017
Posts: 12

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by descendant_command View Post
Ah, that's probably traffic to the listening port of your CounterStrike server.
Block those and you'll just be playing with yourself ...
Is there a solution for this flood or no ?
 
Old 12-27-2017, 03:58 AM   #6
descendant_command
Senior Member
 
Registered: Mar 2012
Posts: 1,876

Rep: Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643Reputation: 643
Quote:
Originally Posted by Crey View Post
Is there a solution for this flood or no ?
Yes, shutdown your server.... no more traffic.
Why exactly are you running the server if you don't want connections to it?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Iptables for protect OpenVPN server from DOS attacks klandestin0 Linux - Security 1 08-19-2015 07:51 AM
Is blocking a subnet with iptables on the router a good way to protect a server? damgar Linux - Security 6 06-11-2012 03:40 PM
Help with Iptables configuration protect from ddos tarciokk Linux - Server 5 11-19-2011 07:15 AM
How to protect LVS director server with IPTABLES yaw55555 Linux - Networking 0 04-10-2009 04:21 AM
IPTables Rules to protect Windows 2000 cli_man Linux - Networking 1 06-10-2004 03:44 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration