[bf1942] DoS against port 29900

Mike stuff at dustsmoke.com
Sat Oct 15 05:17:56 EDT 2005


ScratchMonkey wrote:

> --On Tuesday, October 11, 2005 9:11 PM -0700 James Gurney 
> <james at globalmegacorp.org> wrote:
>
>> Has anyone seen a DoS attack targeting the BF2 gamespy port? I came home
>> to find my server taking a (fairly pathetic) 0.1Mbps flood against port
>> 29900. Unfortunately, the reply was pumping out 2Mbps of traffic,
>> presumably saturating the DSL of whatever poor sap was hosting the
>> trojan. No problem, easily shut down.. I'm just curious if anyone has
>> seen this before.. Seems pretty random.
>>
>> tcpdump revealed the source port as 22222. Port 22222 shows up in Google
>> as being the source port for a bunch of trojans, but none of which 
>> appear
>> to target the gamespy port (as far as I can tell).
>>
>> Anyone seen this before?
>
>
> Sounds like a reflection attack. Valve's servers switched to a 
> challenge-response system to shut down this kind of thing. I believe 
> Unreal Tournament has also addressed it.
>
I bet I can tell you one game that isn't going to address it......

-Mike



More information about the Bf1942 mailing list