Jump to content

IceShiva

Member
  • Posts

    134
  • Joined

  • Last visited

  • Days Won

    1
  • Feedback

    0%

Everything posted by IceShiva

  1. Hello. Was started dwo days ago my server but sometimes I have problems with unknow source dos, so I got the idea that run pf with limitation rules but my rules doesn't log overloaded traffic ofc works fine. #iface name if="igb0" #flags and settings for statefull connections tcp_state = "flags S/SAFR keep state" udp_state = "keep state" #ports for game tcp_world=" {13001 13011 16001 17011 18001 19011 20001 20011 13099 13199 }" p2p_tcp_world=" { 14010 14021 16010 17021 18010 19021 20010 20021 14099 14199 }" udp_world=" {13001 13011 16001 17011 18001 19011 20001 20011 13099 13199 }" p2p_udp_world=" { 14010 14021 16010 17021 18010 19021 20010 20021 14099 14199 }" tcp_auth =" { 11111 11112 } " p2p_tcp_auth =" { 22222 22223 } " udp_auth =" { 11111 11112 } " p2p_udp_auth =" { 22222 22223 } " #limits world_limit="(max-src-conn 10, overload <world_limit_blocked> flush)" #TEST #world_limit="(max-src-conn 10, max-src-conn-rate 40/10, overload <world_limit_blocked> flush)" #world_p2p_limit="(max-src-conn 10, max-src-conn-rate 100/10, overload <world_limit_blocked> flush)" #auth_limit="(max-src-conn 3, max-src-conn-rate 10/10, overload <auth_blocked> flush)" auth_limit="(max-src-conn 1, overload <auth_blocked> flush)" #TEST #auth_p2p_limit="(max-src-conn 1, max-src-conn-rate 10/10, overload <auth_blocked> flush)" ## Tables table <world_limit_blocked> persist file "/home/main/world.blocked" table <auth_blocked> persist file "/home/main/auth.blocked" ## Options set block-policy drop set loginterface $if set optimization normal set skip on lo0 set state-policy if-bound set debug misc ## normalization scrub in all # Filtering #block all ip's over limit for world block in log quick on $if from <world_limit_blocked> to $if #block all ip's over limit for auth block in log quick on $if from <auth_blocked> to $if #block and loging all block log all # icmp without resirections pass in inet proto icmp all #Some services without resirections pass in on $if inet proto tcp from any to any port 22 #SSH pass in on $if inet proto udp from any to any port 22 #SSH pass in on $if inet proto tcp from any to any port 3306 #MYSQL pass in on $if inet proto tcp from any to any port 53 #DNS-TCP pass in on $if inet proto udp from any to any port 53 #DNS-UDP #Filtering world pass in on $if inet proto tcp from any to $if port $tcp_world $tcp_state $world_limit pass in on $if inet proto udp from any to $if port $udp_world $udp_state $world_limit pass in on $if inet proto tcp from $if to $if port $p2p_tcp_world pass in on $if inet proto udp from $if to $if port $p2p_udp_world #Filtering auth pass in on $if inet proto tcp from any to $if port $tcp_auth $tcp_state $auth_limit pass in on $if inet proto udp from any to $if port $udp_auth $udp_state $auth_limit pass in on $if inet proto tcp from $if to $if port $p2p_tcp_auth pass in on $if inet proto udp from $if to $if port $p2p_udp_auth #Outgoing traffic (without limits) pass out on $if inet from $if to any Here is my simpe firewall. Can anyone check a problem? All logfiles exist
  2. ymm but upgrade dx8 to dx9 may have same result as granny 2.4 to granny 2.9 xD Heroes 5 have granny 2.5 and graphics is better than metin
  3. line 238 shop.cpp if (it->second) // if other empire, price is triple dwPrice *= 3;
  4. You can try install percona server (optimalized mysql-server with default InnoDB engine). May someone know whether firewall in ovh will filter layer 7 attack methods such as slowloris or ntp amplification?
  5. I have fx-6100 and I don't have any problems with models but my friend with amd athlon x4 had a problem, but not like black screen (model with new animation was invisible). Easy way when source was not released was to search latest binary with costume system and compatibile with tim granny 2.8 latest revision as I found was r31735 (sg) and r31196 (gf)
  6. Very useful tutorial! But it's not enough to protect server against third party unprivileged persons. Good solution is hide all "external" service such as ssh/mysql/nfs server and client behind vpn , use good website scripts (many server been the pnwed by vulnerabilities in sites) strive to limitation host in mysql users and not privilege users even root to 'FILE' privilege' By 'FILE' privilege , vulnerability homepage script and badly chmoded directories as 'cache' 'images' you can use this as LFI/RFI vuln via load_file() and into outfile statement
  7. For hardcore slowly internet users you can compress game via upx upx -9 --all-methods --best --ultra-brute game Hell Yeah!
  8. I don't trust for tim daemon. Better solution is use daemon it's more extended and very safe. If you want you can setup startup delay, run as user, and many more. For more info type /usr/bin/daemon when is installed. Here is source [Hidden Content]
  9. You can try compile mysql with --with-charset=euc-kr its character set issue
  10. It's not error. You have too many threads runned so error is flooded by other threads.
×
×
  • Create New...

Important Information

Terms of Use / Privacy Policy / Guidelines / We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.