Limiting Client Re-Connects - RunUO

HaraKiri · 12-22-2003, 02:11 PM

Hi,
I have a small problem :
My server console showed this yesterday

[code:1]
Client: xxx : Connected. [1 Online]
Client: xxx: Encrypted client detected, disconnecting
Client: xxx: Disconnected. [0 Online]
Client: xxx: Connected. [1 Online]
Client: xxx: Encrypted client detected, disconnecting
Client: xxx: Disconnected. [0 Online]
Client: xxx: Connected. [1 Online]
Client: xxx: Encrypted client detected, disconnecting
Client: xxx: Disconnected. [0 Online]
[/code:1]

is there any possibility to prevent a client from reconnecting more than x times per minute or something like this ?because I can imagine it gets quite annoying for the server and might cause lag or so ?
Thanks (and sorry for my poor english

)

Phantom · 12-22-2003, 02:14 PM

HaraKiri · 12-22-2003, 02:20 PM

can you please explain a bit more detailed ? I know I am newbie but I would like to know why it wouldn't work :?:

Philantrop · 12-22-2003, 02:26 PM

So RunUO is really fair game for any DoS attack? :?

XxSP1DERxX · 12-22-2003, 02:57 PM

Philantrop, it is ignoring that connection, just as if ignoring packets. Therefore you cant DOS it with just a simple encrypted login

HaraKiri, if you know who is connecting, tell them to use the correct client.

Philantrop · 12-22-2003, 03:12 PM

I wouldn't call this "ignoring" such connections:

Client: 192.168.168.2: Connected. [1290 Online]

I did this on my local tester using this simple loop:

for (( x=0 ; x < 10000; x++ )); do ( telnet vmware 2594 & ) ; done

Using one of the easily available DoS-tools against UO emulators would have been even easier and more effective.

XxSP1DERxX · 12-22-2003, 03:31 PM

You are correct, i overlooked one thing. This should be looked into.

Phantom · 12-22-2003, 04:24 PM

If you firewall his ip, he won't be able to connect.

RunUo can't do anything I don't think, it will only know if the client is encrpyted once it trys to login.

HaraKiri · 12-22-2003, 04:47 PM

but I can't firewall evry single IP can I ?

Philantrop · 12-22-2003, 06:21 PM

Quote:

Originally Posted by Phantom

If you firewall his ip, he won't be able to connect.

DDoS...

Quote:

Originally Posted by Phantom

RunUo can't do anything I don't think, it will only know if the client is encrpyted once it trys to login.

It could. If there are more than 10 client connects per second don't accept anymore new connections for 5 minutes. Just an example, of course.

12-22-2003, 02:11 PM	#1 (permalink)
HaraKiri Join Date: Dec 2003 Posts: 3	Limiting Client Re-Connects Hi, I have a small problem : My server console showed this yesterday [code:1] Client: xxx : Connected. [1 Online] Client: xxx: Encrypted client detected, disconnecting Client: xxx: Disconnected. [0 Online] Client: xxx: Connected. [1 Online] Client: xxx: Encrypted client detected, disconnecting Client: xxx: Disconnected. [0 Online] Client: xxx: Connected. [1 Online] Client: xxx: Encrypted client detected, disconnecting Client: xxx: Disconnected. [0 Online] [/code:1] is there any possibility to prevent a client from reconnecting more than x times per minute or something like this ?because I can imagine it gets quite annoying for the server and might cause lag or so ? Thanks (and sorry for my poor english )

12-22-2003, 02:14 PM	#2 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	Nope

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

12-22-2003, 02:20 PM	#3 (permalink)
HaraKiri Join Date: Dec 2003 Posts: 3	can you please explain a bit more detailed ? I know I am newbie but I would like to know why it wouldn't work :?:

12-22-2003, 02:26 PM	#4 (permalink)
Philantrop RunUO addict Join Date: Jan 2003 Posts: 427	So RunUO is really fair game for any DoS attack? :?

12-22-2003, 02:57 PM	#5 (permalink)
XxSP1DERxX Join Date: Oct 2002 Age: 23 Posts: 4,689	Philantrop, it is ignoring that connection, just as if ignoring packets. Therefore you cant DOS it with just a simple encrypted login HaraKiri, if you know who is connecting, tell them to use the correct client.

12-22-2003, 03:12 PM	#6 (permalink)
Philantrop RunUO addict Join Date: Jan 2003 Posts: 427	I wouldn't call this "ignoring" such connections: Client: 192.168.168.2: Connected. [1290 Online] I did this on my local tester using this simple loop: for (( x=0 ; x < 10000; x++ )); do ( telnet vmware 2594 & ) ; done Using one of the easily available DoS-tools against UO emulators would have been even easier and more effective.

12-22-2003, 03:31 PM	#7 (permalink)
XxSP1DERxX Join Date: Oct 2002 Age: 23 Posts: 4,689	You are correct, i overlooked one thing. This should be looked into.

12-22-2003, 04:24 PM	#8 (permalink)
Phantom Account Terminated Join Date: Sep 2002 Age: 26 Posts: 3,846	If you firewall his ip, he won't be able to connect. RunUo can't do anything I don't think, it will only know if the client is encrpyted once it trys to login.

12-22-2003, 04:47 PM	#9 (permalink)
HaraKiri Join Date: Dec 2003 Posts: 3	but I can't firewall evry single IP can I ?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)