Discussion :

[vodkline]

Coucou, tout le monde !

Je subis des attaques par des proxies. J'ai donc mis un pare-feu (iptables) et j'aimerais savoir maintenant comment je pourrais bannir ces proxies pour qu'ils arrêtent de flooder mon serveur :

Ils se connectent sur mon serveur Minecraft et saturent les slots :

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
2012-05-05 10:23:44 [INFO] epinefer [/98.113.207.198:2997] logged in with entity id 369 at ([world] 410.4334247026954, 63.563474149796235, 320.5281868963409)
2012-05-05 10:23:44 [INFO] [Simple Player List] Can not connect to:
2012-05-05 10:23:44 [INFO] tintinco [/97.91.102.45:2898] logged in with entity id 370 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:44 [INFO] [Simple Player List] Can not connect to:
2012-05-05 10:23:44 [INFO] keevern [/98.251.218.9:2000] logged in with entity id 371 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:44 [INFO] [Simple Player List] Can not connect to:
2012-05-05 10:23:44 [INFO] playday [/173.241.188.178:58222] logged in with entity id 372 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:45 [INFO] [Simple Player List] Can not connect to:
2012-05-05 10:23:45 [INFO] antoine26 [/108.20.152.202:55155] logged in with entity id 373 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:45 [INFO] TheNils_2012 [/64.130.150.69:52539] logged in with entity id 374 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:45 [INFO] Agator [/75.118.82.116:1701] logged in with entity id 375 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:45 [INFO] Vitoke [/98.202.2.109:3771] logged in with entity id 376 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:46 [INFO] maximax538 [/173.66.195.171:54652] logged in with entity id 377 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:46 [INFO] Connection reset
2012-05-05 10:23:46 [INFO] kenisp [/24.182.32.249:4416] logged in with entity id 378 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:46 [INFO] keevern [/24.189.58.63:1948] logged in with entity id 379 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:46 [INFO] Fetching addPacket for removed entity: CraftPlayer{name=keevern}
2012-05-05 10:23:47 [INFO] ninjajamaru [/24.21.71.148:64635] logged in with entity id 381 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:47 [INFO] Charlese [/24.113.59.228:4902] logged in with entity id 382 at ([world] 746.7571112989568, 75.0, 82.05782485277894)
2012-05-05 10:23:48 [INFO] Connection reset
2012-05-05 10:23:49 [INFO] playday [/68.44.110.121:1051] logged in with entity id 383 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:49 [INFO] Fetching addPacket for removed entity: CraftPlayer{name=playday}
2012-05-05 10:23:49 [INFO] inindynup [/24.4.36.54:55556] logged in with entity id 384 at ([world] 400.5, 67.0, 339.5)
2012-05-05 10:23:50 [INFO] flo07laet11 [/69.132.108.205:63412] logged in with entity id 385 at ([world] -393.5583017382485, 64.0, 505.7504080623896)
2012-05-05 10:23:51 [INFO] Connection reset
2012-05-05 10:23:51 [INFO] Maxou45 [/71.60.112.188:63524] logged in with entity id 389 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:52 [INFO] hugo3529 [/71.91.77.154:1858] logged in with entity id 390 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:53 [INFO] bertrand [/75.118.82.116:1975] logged in with entity id 391 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:53 [INFO] [STAB] [bertrand] has logged in on the same IP as [Agator](75.118.82.116:1975)
2012-05-05 10:23:54 [INFO] ced45250 [/98.206.88.182:2678] logged in with entity id 392 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:55 [INFO] TyraelDT [/24.21.71.148:64755] logged in with entity id 393 at ([world] 401.78550822090824, 66.0, 320.04215306633404)
2012-05-05 10:23:55 [INFO] [STAB] [TyraelDT] has logged in on the same IP as [ninjajamaru](24.21.71.148:64755)
2012-05-05 10:23:56 [INFO] malokak [/98.113.207.198:3151] logged in with entity id 394 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:56 [INFO] [STAB] [malokak] has logged in on the same IP as [epinefer](98.113.207.198:3151)
2012-05-05 10:23:57 [INFO] bertrand [/98.227.131.60:60986] logged in with entity id 395 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:57 [INFO] Fetching addPacket for removed entity: CraftPlayer{name=bertrand}
2012-05-05 10:23:57 [INFO] loloic [/98.240.156.227:64008] logged in with entity id 396 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:58 [INFO] tyopido [/98.202.2.109:4297] logged in with entity id 397 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:58 [INFO] [STAB] [tyopido] has logged in on the same IP as [Vitoke](98.202.2.109:4297)
2012-05-05 10:23:58 [INFO] tyopido [/98.251.218.9:2317] logged in with entity id 398 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:58 [INFO] Fetching addPacket for removed entity: CraftPlayer{name=tyopido}
2012-05-05 10:23:59 [INFO] Connection reset
2012-05-05 10:23:59 [INFO] frank0707 [/173.49.84.49:3085] logged in with entity id 399 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:23:59 [INFO] Seebask [/71.195.70.219:2802] logged in with entity id 400 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:24:00 [INFO] Connection reset
2012-05-05 10:24:00 [INFO] jerem10 [/173.66.195.171:54788] logged in with entity id 405 at ([world] -231.80247595456382, 63.0, 594.3052260721103)
2012-05-05 10:24:00 [INFO] [STAB] [jerem10] has logged in on the same IP as [maximax538](173.66.195.171:54788)
2012-05-05 10:24:01 [INFO] thegunix [/216.176.124.176:1337] logged in with entity id 407 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:24:01 [INFO] tintinco [/98.227.12.241:4471] logged in with entity id 408 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:24:01 [INFO] Fetching addPacket for removed entity: CraftPlayer{name=tintinco}
2012-05-05 10:24:03 [INFO] Connection reset
2012-05-05 10:24:05 [INFO] wazazard [/67.83.79.132:2034] logged in with entity id 409 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:24:05 [INFO] Valentin [/80.119.187.116:52604] logged in with entity id 410 at ([world] 398.5, 68.62000000476837, 330.5)
2012-05-05 10:24:06 [INFO] bigsmoke [/68.38.118.76:1352] logged in with entity id 411 at ([world] 400.0, 67.0, 339.0)
2012-05-05 10:24:07 [INFO] Odorile [/64.53.207.142:59105] logged in with entity id 412 at ([world] 400.0, 67.0, 339.0)

En quelques secondes, il remplit les slots. Je ne sais pas comment faire.
Quelqu'un aurait-il une idée?

[Katyucha]

Pour qui est destiné ton serveur minecraft ? toi ? toi et des potes ou toi, des potes, des personnes extérieures ?

Si tu peux faire une liste exhaustive d'IP, un coup de iptables pour n'autoriser que ces machines


Sinon, http://cyberzoide.developpez.com/php4/ip-to-country/

[suya95]

bonjour,

Tu devrais voir du coté de fail2ban, je l'ai mis en place sur mon réseau pour sécuriser l'accès en ssh.

En gros, je l'ai configuré pour qu'au bout de 2 connexions fails en 5secondes l'ip soit banni 2h.

A toi de voir