block ovh script by hex

nanocore

New Member
Joined
Apr 30, 2019
Messages
3
Reaction score
0
Points
3
Age
22
I'm wondering if anyone knows how to block an OVH bypass script by hex values, I've tried comparing different packets received but I can't find much common hex values.
 
U

User_38581

Its not smart to block it with hex, as it could be cpu intensive.
You need to block it by Payload.

And I do not recommend block/filter it on iptables level, its better to give captured file to OVH
 
Last edited by a moderator:

nanocore

New Member
Joined
Apr 30, 2019
Messages
3
Reaction score
0
Points
3
Age
22
Do you know how to block the payload or hex?
 

FromLondon

Honk Honk
TeamSpeak Developer
VIP
Joined
May 20, 2016
Messages
251
Reaction score
91
Points
78
Age
25
Location
Russia
Do you know how to block the payload or hex?
Filtering high bandwidth attacks by hex is shitty way. Create tcpdump and send it to OVH support.
In case if you using OVH Game and attack bypassing their game firewall they will update it
 

nanocore

New Member
Joined
Apr 30, 2019
Messages
3
Reaction score
0
Points
3
Age
22
It is not a high bandwidth attack, it is actually just a tcp script to bypass the vac, so blocking by hex slows the attack enough for the vac to stop it.
 

AndreiD

New Member
Joined
Apr 7, 2019
Messages
4
Reaction score
1
Points
8
Age
30
You really need to sent file to OVH, because its almost never good to filter it under iptables level, its better to block it on network level
 

Top