General Questions - subbill - possible to force a biller disconnect by flooding? Anonymous - Mon Apr 06, 2009 11:57 pm Post subject: subbill - possible to force a biller disconnect by flooding?
I'm just wondering if it would be possible for a player/script kiddie to cause a biller disconnect in a zone by flooding the port or just by sheer DoS attacking? In Trench Wars we've had issues with biller lag/disconnections from the SSC biller that almost seem to be timed badly enough to not be a coincidence, not to mention there tends to be a certain "suspect" around when this happens.
If anyone has any clue about this, I'd appreciate it.
Mine GO BOOM - Tue Apr 07, 2009 12:54 pm Post subject:
Any server can be. The SSC billing server is behind a firewall, but if you flood it enough, the pipe will fill and no server-based firewall can stop that (need to filter at device higher up the chain that can withstand the DDoS), though every zone would notice this and it wouldn't just be Trench Wars.
Is Trench Wars receiving any spikes in packets at that time? Could you log the packets between Trench Wars and the billing server and see if anyone is trying to spoof packets from the billing server?
Cheese - Tue Apr 07, 2009 2:17 pm Post subject:
However, the recycles that Trench Wars is experiencing may also be caused by a sysop sending too many commands at once. This is the doubt which the possible script kiddy is using as cover.
The zone experiences slight universal 'lag' spikes, followed by a seeming disconnection from the biller, which no other zone experiences, followed by a recycle 2-5 minutes after.
Doc Flabby - Tue Apr 07, 2009 3:19 pm Post subject:
without root access to the server , and the ablity to look at firewall logs etc, log some traffic....this speculation is pretty much pointless...Its even possible a background process is running at a certain time every day and eatin cpu causing subspace to disconnect
Cheese - Tue Apr 07, 2009 4:04 pm Post subject:
I believe there are a select few with ftp access to the server, not sure about anything else...
I've always thought that TW ran on a dedicated server... Is this not true?