[cod] Query limiting...

[Luca Farflame Fabbro]

Usually they target a specific host on a specific port. From what I ve seen in the last 6 months typically web servers, FTP servers and a lot of valve engine powered servers. This is what they usually do but you can target almost any service of a known host.
Just few times I ve seen attacks to random ports versus a specific host 
In reply to a small udp packet the reply is around ten times bigger if I well remember Outgoing bandwidth becomes high if the sender has enough upload bandwidth.
Also they use the master list to obtain ip and port of the cod servers and so they have a lot of reflectors to use for the drdos attack.

Thanks for the patch Ryan.

Il giorno 02/ago/2011, alle ore 14:12, "Sheepa" <sheepa at sheepa.org> ha scritto:

> So the idea is to get call of duty server to send enough traffic to a specific (spoofed) address to bring him down?
> 
> What about the server itself?
> 
> -----Ursprungligt meddelande----- From: Steven Hartland
> Sent: Tuesday, August 02, 2011 2:06 PM
> To: Call of Duty server admin list.
> Subject: Re: [cod] Query limiting...
> 
> ----- Original Message ----- From: "Sheepa" <sheepa at sheepa.org>
> 
> 
>> Can't an attacker just use randomized ip addresses as source?
> 
> That would serve no purpose as the server will only respond to
> the source address.
> 
>   Regards
>   Steve
> 
> ================================================
> This e.mail is private and confidential between Multiplay (UK) Ltd. and the person or entity to whom it is addressed. In the event of misdirection, the recipient is prohibited from using, copying, printing or otherwise disseminating it or any information contained in it.
> 
> In the event of misdirection, illegible or incomplete transmission please telephone +44 845 868 1337
> or return the E.mail to postmaster at multiplay.co.uk.
> 
> _______________________________________________
> cod mailing list
> cod at icculus.org
> http://icculus.org/mailman/listinfo/cod 
> _______________________________________________
> cod mailing list
> cod at icculus.org
> http://icculus.org/mailman/listinfo/cod
> 
> 
>