[bf1942] DoS against port 29900
    James Gurney 
    james at globalmegacorp.org
       
    Wed Oct 12 01:39:49 EDT 2005
    
    
  
On 10/11/2005 9:31 PM, ScratchMonkey wrote:
> Sounds like a reflection attack. Valve's servers switched to a 
> challenge-response system to shut down this kind of thing. I believe 
Right, that would make sense. That would explain why blocking incoming 
traffic based on the source address didn't help..
> If you spoof your source UDP address to be your victim, and send tiny 
> requests to lots of game servers, they all reply and swamp the victim.
Any idea how to determine the real source address? I still have the 
incoming flood, which is an irritation more than anything else..
James
    
    
More information about the Bf1942
mailing list