block ovh script by hex

[nanocore]

I'm wondering if anyone knows how to block an OVH bypass script by hex values, I've tried comparing different packets received but I can't find much common hex values.

 

[User_38581]

Its not smart to block it with hex, as it could be cpu intensive.
You need to block it by Payload.

And I do not recommend block/filter it on iptables level, its better to give captured file to OVH

 

[nanocore]

Do you know how to block the payload or hex?

 

[FromLondon]

Do you know how to block the payload or hex?

Filtering high bandwidth attacks by hex is shitty way. Create tcpdump and send it to OVH support.
In case if you using OVH Game and attack bypassing their game firewall they will update it

 

[nanocore]

It is not a high bandwidth attack, it is actually just a tcp script to bypass the vac, so blocking by hex slows the attack enough for the vac to stop it.

 

[AndreiD]

You really need to sent file to OVH, because its almost never good to filter it under iptables level, its better to block it on network level