Skip to content

CS-FW is a high-performance CS 1.6 firewall based on Linux XDP.

License

Notifications You must be signed in to change notification settings

hyperxpro/cs-fw

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CS-FW

CS-FW is a high-performance CS 1.6 firewall based on Linux XDP.

System Requirements

OS: Ubuntu 22.04 LTS
Architecture: x86_64
Memory: 2 GB

Run:

$ sudo ./csfw -i eth0 -p 127.0.0.1:11011

Unload

$ sudo ip link set dev eth0 xdp off

Protection Channels

  1. Allows CS 1.6 game packets only. It tracks traffic and maintains list of genuine clients only and discards all garbage packets.
  2. Drops packets from common UDP reflectors.
    if sport ==  17 ||    // tftp
        sport == 19 ||    // chargen
        sport ==  53 ||   // dns
        sport ==  111 ||  // rpcbind
        sport ==  123 ||  // ntp
        sport ==  137 ||  // netbios-ns
        sport ==  161 ||  // snmp
        sport ==  389 ||  // ldap
        sport == 520 ||   // rip
        sport == 751 ||   // kerberos
        sport == 1434 ||  // ms-sql-s
        sport == 1900 ||  // ssdp
        sport == 5353 ||  // mdns
        sport == 6881 ||  // bittorrent
        sport == 11211 {  // memcached
        return Ok(XdpAction::Drop);
    }

Building from Source:

See CI Workflow file for more details.