<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi guys,<br>
a filter by lenght isn't a good solution. Here's a sample from the
abuse message<br>
<pre wrap="">2011-12-25 13:37:59.270429 GMT ip 46.4.18.xxx.9841 > 208.110.65.xx.20480: UDP (566 bytes) [#0]
2011-12-25 13:37:59.274127 GMT ip 46.4.18.xxx.24685 > 208.110.65.xxx.20480: UDP (575 bytes) [#0]</pre>
As u can see the lenght is even longer then 42-43 bytes. <br>
<br>
The patch from ryan disable its self after some time. Posted before
in this list.<br>
<br>
Hope for a dll or somthing solution. Packetfiltering by an firewall
isn't a good solution for me.<br>
<br>
Greetz<br>
RedDragon<br>
<br>
Am 07.01.2012 00:38, schrieb NewLight Systems:
<blockquote cite="mid:4F0785EB.6020301@newlightsystems.com"
type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
Previous versions where affected by xfire or hlsw ( windows )<br>
<br>
In linux, Ryan's patch is ok, but there are more gameservers
affected (ET, COD2, CODMW, CODWAW, and all Quake based.. )<br>
<br>
El 07/01/12 0:34, John escribió:
<blockquote cite="mid:4F0784ED.5070206@nuclearfallout.net"
type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
David,<br>
<br>
Here's another link to a copy of the Windows tool, if you don't
want to register for an account on the TCAdmin forums: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://files.nfoe.net/download.php?fname=./cod4/CoD4_Getstatus_Flood_Fix.zip">http://files.nfoe.net/download.php?fname=./cod4/CoD4_Getstatus_Flood_Fix.zip</a>.
I don't know if it's the very latest, though (it's v3). <br>
<br>
For Linux hosters, the best option is probably to use Ryan's
patch -- unless you are running something other than 1.7: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://treefort.icculus.org/cod/cod4-lnxsrv-query-limit-test.tar.bz2">http://treefort.icculus.org/cod/cod4-lnxsrv-query-limit-test.tar.bz2</a><br>
<br>
-John<br>
<br>
On 1/6/2012 2:46 PM, STIPE Administrator wrote:
<blockquote cite="mid:010901ccccc5$15d33a90$4179afb0$@com.au"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:"Times","serif";
color:black;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Courier;
color:#2E3BFB;}
p.p3, li.p3, div.p3
{mso-style-name:p3;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Courier;
color:black;}
p.p4, li.p4, div.p4
{mso-style-name:p4;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Courier;
color:black;}
p.p5, li.p5, div.p5
{mso-style-name:p5;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Courier;
color:#0018EA;}
p.p6, li.p6, div.p6
{mso-style-name:p6;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:"Times","serif";
color:black;}
span.s1
{mso-style-name:s1;
text-decoration:underline;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<div>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I
keep getting attacked by other game server companies
who run COD on windows - and they would really like
this DLL fix..<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Does
anyone know where it can be downloaded?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Somebody
gave me a link to a working dll fix for widnows last
week but the website was most likely ddos attacked and
forced to shutdown.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://rankgamehosting.ru/index.php?showtopic=1320">http://rankgamehosting.ru/index.php?showtopic=1320</a><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">somebody
is really trying hard to prevent the fix for this
spreading out.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:
"Tahoma","sans-serif";color:windowtext" lang="EN-US">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"
lang="EN-US"> NewLight Systems [<a
moz-do-not-send="true"
class="moz-txt-link-freetext"
href="mailto:nls@newlightsystems.com">mailto:nls@newlightsystems.com</a>]
<br>
<b>Sent:</b> Saturday, 7 January 2012 6:44 AM<br>
<b>To:</b> Call of Duty server admin list.<br>
<b>Subject:</b> Re: [cod] COD 4 UDP security leak<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">There's a dll that fixed that on
windows and iptables rules on linux<br>
<br>
El 06/01/12 20:08, Bong escribió: <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
Our servers are also down now untill there is a fix but i
am also on a win server :( <br>
-----Original Message----- From: RedDragon <br>
Sent: Friday, January 06, 2012 9:33 AM <br>
To: Call of Duty server admin list. <br>
Subject: [cod] COD 4 UDP security leak <br>
<br>
Hi Guys, <br>
is there a practical solution to fix the udp security
problem? Our <br>
servers were also a target. <br>
We have turned off the servers for now till a logtime
solution patch is <br>
out there. <br>
<br>
@rayn <br>
Is it possible to release the last quick patch as an
offical one? <br>
<br>
Greetz <br>
RedDragon <br>
_______________________________________________ <br>
cod mailing list <br>
<a moz-do-not-send="true" href="mailto:cod@icculus.org">cod@icculus.org</a>
<br>
<a moz-do-not-send="true"
href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
<br>
<br>
<br>
--- <br>
avast! Antivirus: Inbound message clean. <br>
Virus Database (VPS): 120106-0, 06/01/2012 <br>
Tested on: 06/01/2012 19:00:41 <br>
avast! - copyright (c) 1988-2012 AVAST Software. <br>
<a moz-do-not-send="true" href="http://www.avast.com">http://www.avast.com</a>
<br>
<br>
<br>
<br>
<br>
--- <br>
avast! Antivirus: Outbound message clean. <br>
Virus Database (VPS): 120106-0, 06/01/2012 <br>
Tested on: 06/01/2012 19:08:07 <br>
avast! - copyright (c) 1988-2012 AVAST Software. <br>
<a moz-do-not-send="true" href="http://www.avast.com">http://www.avast.com</a>
<br>
<br>
<br>
<br>
_______________________________________________ <br>
cod mailing list <br>
<a moz-do-not-send="true" href="mailto:cod@icculus.org">cod@icculus.org</a>
<br>
<a moz-do-not-send="true"
href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">-- <br>
<br>
<o:p></o:p></p>
<p class="p1"><o:p> </o:p></p>
<p class="p2"><b>David Aguilar Valero</b><o:p></o:p></p>
<p class="p3">Dpto. Comercial y Soporte técnico<o:p></o:p></p>
<p class="p3">NewLight Systems<o:p></o:p></p>
<p class="p2"><b>Servidores de juegos, HW, Dedicados</b><o:p></o:p></p>
<p class="p4"><o:p> </o:p></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:c"><b>crk01@nls.es</b></a></span><o:p></o:p></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:crk01@newlightsystems.com">crk01@newlightsystems.com</a></span><o:p></o:p></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:tecnico@newlightsystems.com">tecnico@newlightsystems.com</a></span><o:p></o:p></p>
<p class="p3">#NewLight_Systems @ irc-hispano.org<o:p></o:p></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="http://www.newlightsystems.com/"><b>www.newlightsystems.com</b></a></span><o:p></o:p></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="http://www.nls.es/"><b>www.nls.es</b></a></span><o:p></o:p></p>
<p class="p6">This email and any files or attachments
transmitted with it are intended solely for the use of
the intended recipient. This email is confidential and
may contain legally privileged information. If you are
not the intended recipient you should not read,
disseminate, distribute, or copy this email. If you have
received this email in error, please notify the sender
immediately and delete it from your system.<o:p></o:p></p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
cod mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
cod mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta http-equiv="Content-Style-Type" content="text/css">
<title></title>
<meta name="Generator" content="Cocoa HTML Writer">
<meta name="CocoaVersion" content="949.54">
<style type="text/css">
p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Times; min-height: 14.0px}
p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Courier; color: #2e3bfb}
p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Courier}
p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Courier; min-height: 14.0px}
p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Courier; color: #0018ea}
p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Times}
span.s1 {text-decoration: underline}
</style>
<p class="p1"><br>
</p>
<p class="p2"><b>David Aguilar Valero</b></p>
<p class="p3">Dpto. Comercial y Soporte técnico</p>
<p class="p3">NewLight Systems</p>
<p class="p2"><b>Servidores de juegos, HW, Dedicados</b></p>
<p class="p4"><br>
</p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:c"><b>crk01@nls.es</b></a></span></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:crk01@newlightsystems.com">crk01@newlightsystems.com</a></span></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="mailto:tecnico@newlightsystems.com">tecnico@newlightsystems.com</a></span></p>
<p class="p3">#NewLight_Systems @ irc-hispano.org</p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="http://www.newlightsystems.com/"><b>www.newlightsystems.com</b></a></span></p>
<p class="p5"><span class="s1"><a moz-do-not-send="true"
href="http://www.nls.es/"><b>www.nls.es</b></a></span></p>
<p class="p6">This email and any files or attachments
transmitted with it are intended solely for the use of the
intended recipient. This email is confidential and may contain
legally privileged information. If you are not the intended
recipient you should not read, disseminate, distribute, or
copy this email. If you have received this email in error,
please notify the sender immediately and delete it from your
system.</p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
cod mailing list
<a class="moz-txt-link-abbreviated" href="mailto:cod@icculus.org">cod@icculus.org</a>
<a class="moz-txt-link-freetext" href="http://icculus.org/mailman/listinfo/cod">http://icculus.org/mailman/listinfo/cod</a>
</pre>
</blockquote>
<br>
</body>
</html>