PlusEmu and DDoS HELP

[ShalawHibblo]

What happens to PlusEmu receiving zombies connections? I say this because I have proxcy http and tcp and have never lay my site and the client , but now the new way is to inject zombies connections to the emulator , so much so that sometimes get to 3400 online . And there are real connections and are thwarting my hotel , and when they reach those connections not allow anyone to connect, the client stays at 76%



What should I do? that this problem is due , if all are in and starts the attack, nobody falls or is disconnected, the website never falls only thing that happens is that nobody can enter again because the client does not exceed 76%

You not see that happening ? look at the time of the connections are followed 100 connections per second . And I have put only 100 connections per IP so you can see the problem , but I've tried "game.tcp.conperip=2147483"

How can i fix that?

 

[Etrion]

"game.tcp.conperip=2147483"
Just put it to 5 and it will only allow 5 connections per IP.
ATM you allow 27000 per IP it says. They aer just flooding your TCP, not anything else.

 

[MayoMayn]

You must be registered for see links

this will solve ur DoS issue, even though it doesnt look like that, but just a connection issue lol like mentioned above.

Sent from my SM-G928F using Tapatalk

 

[Zaka]

If you have a strong server enough you could remove the TCP proxy so that the real IP shows, and just let 5 connections per IP = problem solved

 

[MayoMayn]

If you have a strong server enough you could remove the TCP proxy so that the real IP shows, and just let 5 connections per IP = problem solved

I juse use an ajax request to define some javascript variables that will set the IP, and then I have a 750gb layer aswell as Bitninja as protection. Not even a 100gbps attack gave it a 1ms latency.

 

[Zaka]

I juse use an ajax request to define some javascript variables that will set the IP, and then I have a 750gb layer aswell as Bitninja as protection. Not even a 100gbps attack gave it a 1ms latency.

But the ajax request goes to the emulator then to make sure that it has the right IP?

 

[MayoMayn]

But the ajax request goes to the emulator then to make sure that it has the right IP?

In the client.php where the IP, swf and ports get defined, I just simply write: SWF, FUCK, OFF and then define those variables with values from an ajax request.

 

[Zaka]

In the client.php where the IP, swf and ports get defined, I just simply write: SWF, FUCK, OFF and then define those variables with values from an ajax request.

oh okay, but they would still be visible tho if you opened the view-source ?

 

[ShalawHibblo]

oh okay, but they would still be visible tho if you opened the view-source ?

Zaka jag har bra server. Är det bättre om jag tar bort TCP Proxyn?
Mitt server:

För de kan endast ta ner klienten och inte hemsidan.

 

[Zaka]

Zaka jag har bra server. Är det bättre om jag tar bort TCP Proxyn?
Mitt server:

För de kan endast ta ner klienten och inte hemsidan.

I don't know really how @Sentinel did it, but his way sounds smart, that way you would get the correct IP's aswell.

 

[ShalawHibblo]

In the client.php where the IP, swf and ports get defined, I just simply write: SWF, FUCK, OFF and then define those variables with values from an ajax request.

How much would it cost if i set up this you talking about?

 

[MayoMayn]

How much would it cost if i set up this you talking about?

Nothing? Lol. Its not safe proof, you can easily edit the js files and getting the IP by using console.log, but only 1/1000 idiots on retros would consider trying that. I will provide an example later.
Sent from my SM-G928F using Tapatalk

 

[ShalawHibblo]

Nothing? Lol. Its not safe proof, you can easily edit the js files and getting the IP by using console.log, but only 1/1000 idiots on retros would consider trying that. I will provide an example later.
Sent from my SM-G928F using Tapatalk

Can you help me with it later?

 

[Zaka]

Nothing? Lol. Its not safe proof, you can easily edit the js files and getting the IP by using console.log, but only 1/1000 idiots on retros would consider trying that. I will provide an example later.
Sent from my SM-G928F using Tapatalk

Would love to see an example aswell, sounds like a good way to do it anyways. Otherwise, how about making the emulator take in the userid trying to connect or SSO ticket or something, and associate that with the latest IP logged by the cms or something? That could work aswell but needs some work done on the emulator.

 

[Etrion]

Think there was a security fix in IIS (when you install) that will fix the TCP flood.

 

[Zaka]

Think there was a security fix in IIS (when you install) that will fix the TCP flood.

I think more people should go for Apache instead of IIS, IIS is mainly working on ASP files, whilst Apache is made to run scripts like PHP and webscripts overall.

 

[ShalawHibblo]

I think more people should go for Apache instead of IIS, IIS is mainly working on ASP files, whilst Apache is made to run scripts like PHP and webscripts overall.

They can still take me down i change the TCP PROXY from xhosts to

You must be registered for see links

still they can boot the emulator.
 
And nobody cant log in

 

[MayoMayn]

They can still take me down i change the TCP PROXY from xhosts to

You must be registered for see links

still they can boot the emulator.
 
And nobody cant log in

Just stop using a proxy seriously, in the end it's good for nothing, and its resolvable using the right tools. If your proxy goes down, so does your client (and webserver, if your DNS is pointed to your proxy). Just use Bitninja and get rid of your DoS and flooding issues, and set max connection per IP to 5, like @Zaka mentioned above.

 

[Zaka]

Just stop using a proxy seriously, in the end it's good for nothing, and its resolvable using the right tools. If your proxy goes down, so does your client (and webserver, if your DNS is pointed to your proxy). Just use Bitninja and get rid of your DoS and flooding issues, and set max connection per IP to 5, like @Zaka mentioned above.

@Sentinel you could provide the example of loading info using ajax and then he could add bitninja to that = problem solved!

 

[Etrion]

People cant TCP flood on my dedi server, dunno why tho.