cs-fw

CS-FW is a high-performance CS 1.6 firewall based on Linux XDP.

GPL-3.0 License

Stars
9
Committers
1

CS-FW

CS-FW is a high-performance CS 1.6 firewall based on Linux XDP.

System Requirements

OS: Ubuntu 22.04 LTS Architecture: x86_64 Memory: 2 GB

Run:

$ sudo ./csfw -i eth0 -p 127.0.0.1:11011

Unload

$ sudo ip link set dev eth0 xdp off

Protection Channels

  1. Allows CS 1.6 game packets only. It tracks traffic and maintains list of genuine clients only and discards all garbage packets.
  2. Drops packets from common UDP reflectors.
    if sport ==  17 ||    // tftp
        sport == 19 ||    // chargen
        sport ==  53 ||   // dns
        sport ==  111 ||  // rpcbind
        sport ==  123 ||  // ntp
        sport ==  137 ||  // netbios-ns
        sport ==  161 ||  // snmp
        sport ==  389 ||  // ldap
        sport == 520 ||   // rip
        sport == 751 ||   // kerberos
        sport == 1434 ||  // ms-sql-s
        sport == 1900 ||  // ssdp
        sport == 5353 ||  // mdns
        sport == 6881 ||  // bittorrent
        sport == 11211 {  // memcached
        return Ok(XdpAction::Drop);
    }

Building from Source:

See CI Workflow file for more details.