Quake 3 vs DDOS

RouterOS Beginner Basics
1

Hi all!
I have a server quake 3 on Windows 7. The problem described here on this page: http://www.altfire.com/main/news/index.php?news_id=586
The solution from this page will not work. But I hope to solve the problem with mikrotik.

A little more detail about the problem: a bot (script) on the Internet (he uses a proxy of course) constantly interrogates (query) my server (the server configuration, taymlimit, fraglimit, etc. - the usual information that is obtained by scanning the server in the game menu Multiplayer - this information received via wireshark). This bot polls the server at high speed and sends a lot of packages. That of course is bad for the game to all participants.

I want to ask knowledgeable users as I block a bot? On what basis? What usually make (and how).)? To cut the rate? To cut the number of packets? I beg your tips. If you need additional information, then of course give.

2

if you are looking at this with Wireshark - do these queries have some kind of pattern? if yes, you can use L7 rules to block such queries. There could be problems with legitimate users making the same queries, but I’m not sure how your system works. Is it a public server listed on the internet, where anyone can connect? If so, it will be hard to distinguish legitimate users from bots.

3

Thx for reply, normis!

Yeah, server is public (in internet). Anyone can join and play.
Maybe i can cut speed of players? I cheked and found than all quake 3 clients have speed like not more 8000 bite/sek. DDOSer use speed more than 8000 (~200 kilobit/sek). How can i correct create “cutter rule” for ALL connection for incomnig 27960 udp port?

L7 rules - where is it?
Thx!