{"action":"created","issue":{"url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/473","labels_url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/473/labels{/name}","comments_url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/473/comments","events_url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/473/events","html_url":"https://github.com/dgibbs64/linuxgsm/issues/473","id":103203910,"number":473,"title":"GameServerQuery helps attacker get server offline.","user":{"login":"iNilo","id":3451587,"avatar_url":"https://avatars.githubusercontent.com/u/3451587?v=3","gravatar_id":"","url":"https://api.github.com/users/iNilo","html_url":"https://github.com/iNilo","followers_url":"https://api.github.com/users/iNilo/followers","following_url":"https://api.github.com/users/iNilo/following{/other_user}","gists_url":"https://api.github.com/users/iNilo/gists{/gist_id}","starred_url":"https://api.github.com/users/iNilo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iNilo/subscriptions","organizations_url":"https://api.github.com/users/iNilo/orgs","repos_url":"https://api.github.com/users/iNilo/repos","events_url":"https://api.github.com/users/iNilo/events{/privacy}","received_events_url":"https://api.github.com/users/iNilo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-08-26T08:03:15Z","updated_at":"2015-08-26T08:06:18Z","closed_at":null,"body":"Hey, Im opening this issue to make you aware of an rather unfortunate issue.\r\n\r\nI'm hosting some CSGO Servers and I'm sure it's purely accidental that this happened but when an attacker UDP floods the srcds ports (27015) the srcds will stop responding on those ports (out of self protection?).\r\n\r\nSo when running a cronjob every minute that checks for an offline server the 5 millisecond timeout is causing a restart.\r\n\r\nhttps://github.com/dgibbs64/linuxgsm/blob/master/GameServerQuery/gsquery.py#L17\r\n\r\nTLDR: attacker floods ports, query script thinks server is offline, attacker succeeds in taking down a (full) server.\r\n\r\n\r\nThis might be an unsolvable problem on your part and may require the server owners to protect against UDP floods, but I want to let you know this is happening"},"comment":{"url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/comments/134891000","html_url":"https://github.com/dgibbs64/linuxgsm/issues/473#issuecomment-134891000","issue_url":"https://api.github.com/repos/dgibbs64/linuxgsm/issues/473","id":134891000,"user":{"login":"dgibbs64","id":4478206,"avatar_url":"https://avatars.githubusercontent.com/u/4478206?v=3","gravatar_id":"","url":"https://api.github.com/users/dgibbs64","html_url":"https://github.com/dgibbs64","followers_url":"https://api.github.com/users/dgibbs64/followers","following_url":"https://api.github.com/users/dgibbs64/following{/other_user}","gists_url":"https://api.github.com/users/dgibbs64/gists{/gist_id}","starred_url":"https://api.github.com/users/dgibbs64/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dgibbs64/subscriptions","organizations_url":"https://api.github.com/users/dgibbs64/orgs","repos_url":"https://api.github.com/users/dgibbs64/repos","events_url":"https://api.github.com/users/dgibbs64/events{/privacy}","received_events_url":"https://api.github.com/users/dgibbs64/received_events","type":"User","site_admin":false},"created_at":"2015-08-26T08:06:18Z","updated_at":"2015-08-26T08:06:18Z","body":"Thanks for this info Will have to see if there is a way around this problem. Maybe there is some sort of whitelist for SRCDS or something. Will have to play around. However if anyone does find a way around this issue please post it."}}