Tundub, et see exploit toimib ka linux serveritel? Või on minu serverid siis millegi muu otsa sattunud. Igatahes rünnak tuleb awes0me IP'lt, panin tema IP'le bani hetkel, kuid see on ajutine lahendus. Tõesti, kas sul midagi targemat ei ole teha?
screenlog.0:
L 02/28/2012 - 17:00:45: "83PYKY" connected, address "92.62.102.53:27622"
./hlds_run: line 319: 11391 Segmentation fault (core dumped) $HL_CMD
email debug.log to [email]linux@valvesoftware.com[/email]
Tue Feb 28 17:00:46 EET 2012: Server restart in 10 seconds
debug.log:
----------------------------------------------
CRASH: Tue Feb 28 17:00:46 EET 2012
Start Line: ./hlds_i686 -game cstrike +ip 217.146.76.24 -port 27015 +map deathrun_extreme +maxplayers 25 +fps_max 1000 +sys_ticrate 1000 -debug -pidfile hlds.27782.pid
[New Thread 11395]
[New Thread 11394]
[New Thread 11392]
Core was generated by `./hlds_i686 -game cstrike +ip 217.146.76.24 -port 27015 +map deathrun_extreme +'.
Program terminated with signal 11, Segmentation fault.
#0 0xb78c36a2 in SV_ReadPackets () from /root/servers/deathrun/engine_i686.so
#0 0xb78c36a2 in SV_ReadPackets () from /root/servers/deathrun/engine_i686.so
#1 0xb5a19530 in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
No symbol table info available.
From To Syms Read Shared Object Library
0xb7eeca40 0xb7eed9b8 Yes (*) /lib32/libdl.so.2
0xb7ed7340 0xb7ee36f8 Yes (*) /lib32/libpthread.so.0
0xb7da1a50 0xb7e9964c Yes (*) /lib32/libc.so.6
0xb7efa830 0xb7f1170f Yes (*) /lib/ld-linux.so.2
0xb787bc30 0xb78fc2c4 Yes /root/servers/deathrun/engine_i686.so
0xb783c5f0 0xb784aec4 Yes ./libsteam_api_c.so
0xb7814460 0xb782ec18 Yes (*) /lib32/libm.so.6
0xb77f8a60 0xb7806b4d Yes /root/servers/deathrun/filesystem_stdio_i386.so
0xb57c3184 0xb57d66e0 Yes ./cstrike/addons/metamod/dlls/metamod_i386.so
0xb559e09c 0xb56c7668 Yes /root/servers/deathrun/cstrike/dlls/cs_i386.so
0xb53032e0 0xb5319ef8 Yes (*) /root/servers/deathrun/cstrike/addons/dproto/dproto_i386.so
0xb5243160 0xb52c08f8 Yes (*) /usr/lib32/libstdc++.so.6
0xb51e0350 0xb51f8ec8 Yes (*) /usr/lib32/libgcc_s.so.1
0xb5157e90 0xb51a9724 Yes /root/servers/deathrun/cstrike/addons/amxmodx/dlls/amxmodx_mm_i386.so
0xb4f762c0 0xb4ff8294 Yes (*) cstrike/addons/amxmodx/modules/mysql_amxx_i386.so
0xb4f319e0 0xb4f35894 Yes cstrike/addons/amxmodx/modules/fun_amxx_i386.so
0xb4f22940 0xb4f2a8e4 Yes cstrike/addons/amxmodx/modules/cstrike_amxx_i386.so
0xb4f11e90 0xb4f13814 Yes (*) /root/servers/deathrun/cstrike/addons/antidlfile/antidlfile_i386.so
0xb4edfea0 0xb4f09b54 Yes cstrike/addons/amxmodx/modules/fakemeta_amxx_i386.so
0xb4ebbf30 0xb4ebf264 Yes (*) cstrike/addons/amxmodx/modules/geoip_amxx_i386.so
0xb4d972d0 0xb4d9fe94 Yes (*) cstrike/addons/amxmodx/modules/regex_amxx_i386.so
0xb4d8fdd0 0xb4d90e04 Yes (*) cstrike/addons/amxmodx/modules/sockets_amxx_i386.so
0xb4d7bce0 0xb4d892f4 Yes cstrike/addons/amxmodx/modules/engine_amxx_i386.so
0xb4d68b00 0xb4d6ddc4 Yes cstrike/addons/amxmodx/modules/nvault_amxx_i386.so
0xb4d45340 0xb4d5bcf4 Yes cstrike/addons/amxmodx/modules/hamsandwich_amxx_i386.so
0xb3d28a20 0xb3d2fe08 Yes (*) /lib32/libnss_files.so.2
0xb7ef1be0 0xb7ef4c08 Yes (*) /lib32/libnss_dns.so.2
0xb3d15630 0xb3d218a8 Yes (*) /lib32/libresolv.so.2
0xb35c25f0 0xb3b565a4 Yes (*) ./steamclient.so
0xb34993c0 0xb34b7a68 Yes (*) ./libtier0_s.so
0xb343d050 0xb3474fe0 Yes (*) ./libvstdlib_s.so
0xb30c94b0 0xb31aaa04 Yes ./libsteamvalidateuseridtickets.so
(*): Shared library is missing debugging information.
Stack level 0, frame at 0xbfbf1ae4:
eip = 0xb78c36a2 in SV_ReadPackets; saved eip 0xb5a19530
called by frame at 0xb5a19538
Arglist at 0xbfbf1adc, args:
Locals at 0xbfbf1adc, Previous frame's sp is 0xbfbf1ae4
Saved registers:
eip at 0xbfbf1ae0
End of crash report
----------------------------------------------
Saitani pakutud fix toimib vaid windowsil ning dproto.cfg muutmine muidugi aitaks, kuid siis saaksid serverisse connectida vaid steamerid.
Igatahes on kellegil veel selline probleem või olen ma ainuke, kelle servereid rünnatakse?
Edit:
Kuna tegu on VPSiga, siis soovitati sellist commandit, pidavat aitama:
iptables -I INPUT -p udp -m length --length 222 -j DROP
Eks vaatab, kas crashib veel või mitte.
