2009-09-01, 03:44 PM
Black Mage Wrote:Has anyone tried using packet filtering as a countermeasure to DC spammers? If the spam packets never are received by the maple client, it may make the difference between getting dced and not getting dced, even though such hacks may take up significant bandwidth.
I've never been able to try this, myself, due to not having a cooperative dc hacker around.
That's not gonna work because D/C-Lag hack acts like a DDoS attack, even if you ignore some packets, they're still knocking your router/modem/network card asking for memory and cpu power to be processed and discarded. And remember, it's not the hack itself doing an attack they're using a currently Nexon game server already connected with your computer, so its Nexon server who is d/c-laging during an attack, hackers are using the servers to repeat the message for us. But if Nexon routers are filtering those packets before they leave Nexon network, in this scenario we're protected, I guess.
In this IO graphic
Spoiler
The red Line is the IP address of one of Nexon game servers.
The green Line is a packet of 1434 bytes.
Starting from the left to 955s is a normal FM spot working.
From 955s to the right side, note the increase on the green line, is the D/C-Lag hacking starting, the Y axe is in bytes per second its like 25 kb/s my backup network speed. Its Nexon server, already connected to my computer flooding my network at his maximum download speed, making my MS client go crazy for CPU processing and making me D/C.


![[Image: cadhbaack.jpg]](http://bayimg.com/image/cadhbaack.jpg)