[[UZF]zombiebob]

Rambetter, on 12 December 2011 - 12:46 AM, said:

I'd like to get some feedback for my fix.
Can anyone confirm that a "before and after", where the "before" is sending tons of data and "after" isn't?

Thank you Ramb,

So far so good, followed your SVN guide via http://www.urbanterr...-exploit-fixes/

My servers were being mega-exploited with 10-20Mbps before (about 15gig every 4 hrs, 878.8 GB so far this month), almost nothing after new SVN build, looking good! (just hope i did it in time to not get my servers taken down..i was only alerted to the problem when Abuse complaints started flooding in!)

Thankyou Rambo!

Regards,
>zB

This post has been edited by zombiebob: 15 January 2012 - 06:04 AM

[gXS.looza]

I have the same problem, my server used 1300 gb in 14 days and up to 130 gb per day :/
i got it limited now with that iptables stuff,

I tryed to compile the source from that svn also but im to stupid for that :D

Barbatos, on 14 January 2012 - 03:12 PM, said:

I'm working on an official security update for the server binaries. It'll be ready for download asap (by Monday I hope).

one question: i use at the moment a modyfied server binary what fixed that rcon flood thing (i had big problems with that b4 some month)

will the rcon flood fix in the new binary too?

[FS Barbatos]

I'm including the fixes for all known bugs / exploits.

[pwnz:Terrorist]

Barbatos, on 15 January 2012 - 11:29 AM, said:

I'm including the fixes for all known bugs / exploits.

Hope you release a fix soon!

[FS |HSO|RaideR]

The coder is on this as we speak. So all we can do is wait on the work to be finished and ready for distribution.

[gXS.looza]

I tryed it for the mean time with compilimg rambetters svn,

i get between the getstatus spam messages like:

Possible DRDoS attack to address xxx.xx.xxx.xx , ignoring getinfo/getstatus connectionless packet

but the same address continues spamming in the console,
no idea if they really get ignored and the traffic goes down.. i will see that tomorrow.

For now the iptables stuff helps me out very well, only serverbrowsers are bugging as hell :D

I wish good luck to Barbatos with that project..

thx for ur support :)

[rfx]

looza, on 16 January 2012 - 08:04 PM, said:

i get between the getstatus spam messages like:

Possible DRDoS attack to address xxx.xx.xxx.xx , ignoring getinfo/getstatus connectionless packet

but the same address continues spamming in the console

That's the output you get when it's enabled and works. You can see on my graph at http://my-serve.rs/m...er/if_eth0.html how the traffic suddenly went down (look at the lower left and witness the spikes between Week 01 and Week 02).

[gXS.looza]

Ok i placed the new binary now on all servers i run (couldnt do yesterday, didnt want to kick all players)

and yes it works, the traffic goes down :)

if it helps someone here is my build from rambetters svn,
i compiled it on debian lenny:

http://gamexs.de/ioUrTded.i386

This post has been edited by looza: 05 March 2012 - 08:01 AM

[|P|Nitro]

RaideR, on 16 January 2012 - 07:25 PM, said:

The coder is on this as we speak. So all we can do is wait on the work to be finished and ready for distribution.

thats great news raider, but instead of re-inventing the wheel why is it not possible for someone to verify the work of ramb and just build a version without the extra patches and accept that. rather than doing all the coding again just to say its "official"

[FS Barbatos]

nitro, on 17 January 2012 - 12:52 PM, said:

thats great news raider, but instead of re-inventing the wheel why is it not possible for someone to verify the work of ramb and just build a version without the extra patches and accept that. rather than doing all the coding again just to say its "official"

That's approximately what I am doing. I took the latest ioquake3 sources, changed it a bit to fully support Urban Terror and added the patches.
Both linux builds are done, I'm now compiling the windows build.