Help [GameServer Problem]

[JumperDLR]

Hi,today when I looked in game server i saw

 

Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.2

 

This makes me a big lag,what can I do to stop? pls help me

[Gxz]

Hi,today when I looked in game server i saw

 

Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.27.38] disconnected abnormally.
Client [iP: 188.24.2

 

This makes me a big lag,what can I do to stop? pls help me

this means someone is attacking/ddosing your server with a program, to fix it block this ip if you have linux or add java protections against this programs..

[JumperDLR]

can u help me with java code?

[Gxz]

can u help me with java code?

i dont know exactly what this attacker is, i think is l2j attacker.. search in forum, somewhere is posted

[JumperDLR]

Where can I get IPv4Filter for interlude?

[Gxz]

Where can I get IPv4Filter for interlude?

 

here is mine for interlude

 

/* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2, or (at your option)
* any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
* 02111-1307, USA.
*
* http://www.gnu.org/copyleft/gpl.html
*/

package net.sf.l2j.gameserver.util;

import java.net.InetAddress;
import java.nio.channels.SocketChannel;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.Map.Entry;

import com.l2jserver.mmocore.network.IAcceptFilter;

/**
* Formatted Forsaiken's IPv4 filter [DrHouse]
* 
* @Reworked by Adryan
*
*/
public class IPv4Filter implements IAcceptFilter, Runnable
{
private HashMap<Integer, Flood> _ipFloodMap;
private static final long SLEEP_TIME = 5000;

public IPv4Filter()
{
	_ipFloodMap = new HashMap<Integer, Flood>();
	Thread t = new Thread(this);
	t.setDaemon(true);
	t.start();
}
/**
 * 
 * @param ip
 * @return
 */
private static final int hash(byte[] ip)
{
	return ip[0] & 0xFF | ip[1] << 8 & 0xFF00 | ip[2] << 16 & 0xFF0000 | ip[3] << 24 & 0xFF000000;
}

protected static final class Flood
{
	long lastAccess;
	int trys;

	Flood()
	{
		lastAccess = System.currentTimeMillis();
		trys = 0;
	}
}

public boolean accept(SocketChannel sc)
{
	InetAddress addr = sc.socket().getInetAddress();
	int h = hash(addr.getAddress());

	long current = System.currentTimeMillis();
	Flood f;
	synchronized (_ipFloodMap)
	{
		f = _ipFloodMap.get(h);
	}
	if (f != null)
	{
		if (f.trys == -1)
		{
			f.lastAccess = current;
			return false;
		}

		if (f.lastAccess + 1000 > current)
		{
			f.lastAccess = current;

			if (f.trys >= 3)
			{
				f.trys = -1;
				return false;
			}

			f.trys++;
		}
		else
		{
			f.lastAccess = current;
		}
	}
	else
	{
		synchronized (_ipFloodMap)
		{
			_ipFloodMap.put(h, new Flood());
		}
	}

	return true;
}

public void run()
{
	while (true)
	{
		long reference = System.currentTimeMillis() - (1000 * 300);
		ArrayList<Integer> toRemove = new ArrayList<Integer>(50);

		synchronized (_ipFloodMap)
		{
			for (Entry<Integer, Flood> e : _ipFloodMap.entrySet())
			{
				Flood f = e.getValue();
				if (f.lastAccess < reference)
					toRemove.add(e.getKey());
			}
		}

		synchronized (_ipFloodMap)
		{
			for (Integer i : toRemove)
			{
				_ipFloodMap.remove(i);
			}
		}

		try
		{
			Thread.sleep(SLEEP_TIME);
		}
		catch (InterruptedException e)
		{

		}
	}
}

}

[Jimaras22]

It's not the full fix for this attack.

What client are you running?

[Gxz]

It's not the full fix for this attack.

What client are you running?

tested l2j attacker and not working even in 100 years.

[JumperDLR]

thx,I do this job xD

where can i find this program so i can test my server ?

[Gxz]

thx,I do this job xD

where can i find this program so i can test my server ?

http://www.4shared.com/file/143211067/76167dcf/Server_Attacker_V3_12.html

[JumperDLR]

Thank you helped me!

[Gxz]

Thank you helped me!

np.. i guess someone should lock it if you dont need any more help with this issue

[JumperDLR]

There are different protections,for l2jserver?

Please post the codes..or link something...

[Gxz]

There are different protections,for l2jserver?

Please post the codes..or link something...

maybe 1 more for l2j attacker but with this ipv4filter you are safe from this... btw you are not safe from all ddos programs.. you will never be... you can restrict most of them with firewall rooter or other java programs... depends what the ddos program is

[JumperDLR]

ok, i have router and firewall protection,but I can not give me it down, but lag is small.. as in many players have lag its s***s :|

 

my conexion for internet its guaranteed to not decrease

[Gxz]

ok, i have router and firewall protection,but I can not give me it down, but lag is small.. as in many players have lag its s***s :|

no no you didnt understand, i am talking about firewall router... not about firewall + router... everyone have these