Jump to content

eressea

Legendary Member
  • Posts

    534
  • Credits

  • Joined

  • Last visited

  • Days Won

    7
  • Feedback

    0%

Posts posted by eressea

  1. AFAIK even hardware firewalls internally use iptables.

    Except if someone writes his own OS for the firewall a case I really doubt since the iptables that comes with the linux Kernel is an extremely good and reliable base.

    I may be wrong because I don't have much hands-on experience with firewalls

     

    When it's Linux-based, it will use iptables, that's fact. There are some other options that are used commonly, for example pfSense which is FreeBSD-based. Also Cisco has it's own operating system (IOS, don't confuse with iOS)

  2. iptables is your friend, it can do anything you describe and literally ALL firewalls are just user interfaces for plain iptables. Just look for a guide on the net

     

    Unless you have some special hardware like Radware DefensePro

     

    I know i can do it with iptables. The thing is, its just a tiny tiny vps, so every connection = check in the iptables. I just wanted cloudflare to take responsibility of filtering, not to let them into my server at all.

     

    I fear you won't find any free service for it; or at least service you can count on

     

    Keep in mind that iptables has nearly zero overhead and a very slight one in case of a few million records

     

    Depends on how many rules do you use, whether you use conntracking (and whether you use it the right way - then it can help much because you check only SYN packets and pass through the rest) etc...

    There's also lot of additional settings that might interest you like SYN cookies.

     

    Szaka: If I were you, I'd start with iptables and try to find something better only if iptables won't do it

     

    EDIT: In case you need to check whether IP belongs to some set, don't set rules for all those addresses. Use ipset http://ipset.netfilter.org/

  3. Hi there,

     

    does anyone know how drop_time in fieldcycle.txt should work?

     

    In leaked Gracia Final when no change in points occurs within that time, it goes one step down.

    This is called from timer (that runs every 30 seconds) and it doesn't update last point change time, so it basically goes one step down every 30 seconds!

     

    Is this correct behavior or is it bug? Should last point change time get updated when it goes one step down (thus going one step down every 3 days) or not (thus going one step down every 30 seconds)?

     

    Thanks!

  4. About drop Issue true it was an issue in my end sorry I did fresh install and it does work as intended.

    Also maybe we can already but can we pull the currently numbers of players and max from the game server ?

    If not do you think you could add such feature for a proper online status from a website outside the machine host ? ^^

     

    By the way sorry if I annoy you with suggestions it just that really a great extender you are doing and I try to add my grain of salt eheh ~

     

    You don't need server-side support for this, you can get online numbers from lin2db.dbo.user_count table

  5. Hi,

     

    I don't have any centralized build numbers, only git commits - but I can't use them, because they would be 1 commit off. Maybe build date would be fine...

     

    Auto announcement - useful feature, I'll think about it

     

    Drop issue - that will be client related because there's no difference between these packets all over protocol 83, 87, 148 and 152... I use protocol 152 and don't have any issue with items on the ground.

×
×
  • Create New...