Currently, this is our dedicated server setup tutorial: http://wiki.empiresmod.com/index.php?title=Dedicated_Server_Setup While not exactly horrible, we can certainly use hints and tips from experienced server owners to help protect servers from DoS spam, known crash exploits, etc. What modules are crucial in running an Empires server? What plugins should every Empires server have? If we want a lot of people for the next patch, we'll need some decent, hardy servers available, so help us out
We should probably make an actual server package this time. We sort of forgot that part last time. I can't really vouch for crash protection because I don't really bother with that, but VIPER is locked up tight using KAC, DaF and a few other things.
As trickster mentioned we do use a few plugins on VIPER. One is called KAC, which stands for Kigen's Anti-Cheat , it is designed to detect most cheats. which can be found here. http://kigenac.com/viewtopic.php?f=4&t=231 We also have DAF installed, which stands for DOS Attack Fix, which can be downloaded here http://www.sourceop.com/modules.php?name=Downloads&d_op=viewdownload&cid=9 DAF blocks the IP of the DOS attacker. On our dedi we have wire shark installed, Wireshark lets you capture and interactively browse the traffic running on a computer network. Which is helpful when being attacked. You can downlaod it here http://www.wireshark.org/download.html Unfortunately, on Windows, if a full force DDOS attack occurs, there is little we can do to stop it. The best way to deal with that is to change your server's ports, if possible, and use the data from wireshark to help track where the attacks are coming from and have your servers isp null route the offending ip's.
Just curious... if your in the middle of a full force DDos... how do you connect to your server to change ports and what not? Does your server always have a certain % of network allocated only only for your use?
Most of the current DoS attacks only really affect the srcds server, it's much easier to overwhelm that than the entire box. In short, source is easier to break, given the amount of exploits.
Does anyone feel like writing up a short tutorial on how to install the DAF and KAC (+ Sockets) plugins for Empires?
I'll do it. I have the non socket version of KAC on my server that Recon edited. I am not sure if it is the best version at this time, but I found a post he made back in 2009 http://forums.empiresmod.com/showpost.php?p=239139&postcount=1