[quake3-bugzilla] [Bug 5678] prevent using getinfo as an amplifier for DDOS attacks

bugzilla-daemon at icculus.org bugzilla-daemon at icculus.org
Wed Jun 20 12:47:03 EDT 2012


https://bugzilla.icculus.org/show_bug.cgi?id=5678

--- Comment #2 from /dev/humancontroller <devhc97 at gmail.com> 2012-06-20 12:47:03 EDT ---
this particular patch uses a shared "bucket" for both getstatus and getinfo
limiting.

the following is an example sh(1) command line with which one can test the
effects of this patch on a getinfo-DOSed server (that should be hosted at
127.0.0.1:27960):

while true ; do { printf '\377\377\377\377getinfo' | nc -u 127.0.0.1 27960 & }
; done

where nc(1) is the netcat utility.

-- 
Configure bugmail: https://bugzilla.icculus.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the quake3-bugzilla mailing list