FileFront Forums

FileFront Forums (http://forums.filefront.com/)
-   SW:JK3 Problems, Errors and Help (http://forums.filefront.com/sw-jk3-problems-errors-help-529/)
-   -   Need help with banning and hackers (http://forums.filefront.com/sw-jk3-problems-errors-help/262465-need-help-banning-hackers.html)

Eye Of Evil July 2nd, 2006 02:05 PM

Need help with banning and hackers
 
I got a problem on my server, that I ban ppl, their IP that is, and they keep changing it and coming back, is there a way to stop them from coming back even after they change IP? im affrid one day they will just change name and I wont be able to ban them on spot because I wouldent know who they are, and besides I just want them banned of my server.
Other thing is there is this hacker, who keeps sending crashing bots to my server, like f94384l2, with those types of names, and I cant stop it, and he crashed my server few times now with other ways too, is there a place to report hackers and that somebody will deal them?

Sry if this isnt the right place to post this I just thought since its helping section it would right to put it here, Thanks ahead for anwsering.

Mikouen July 2nd, 2006 02:42 PM

Re: Need help with banning and hackers
 
Ban their IP range.

As for the bots, you can prevent that by disabling bots. If that doesn't work, make sure your server is v1.01. There may be a security patch of some sort that was distributed to server hosting companies, I've heard mutterings about it, so it may be worth looking into.

And, change your admin and RCON passwords if you suspect they've been compromised.

Eye Of Evil July 2nd, 2006 03:00 PM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by Kouen
Ban their IP range.

As for the bots, you can prevent that by disabling bots. If that doesn't work, make sure your server is v1.01. There may be a security patch of some sort that was distributed to server hosting companies, I've heard mutterings about it, so it may be worth looking into.

And, change your admin and RCON passwords if you suspect they've been compromised.

Someone told me that if il ban someone from washintong, I mean his range, then all ppl from washingtong will be banned, and that is something I dont want to be, is there a way to make range smaller? and what about ppl who change their entire IP?

Mikouen July 2nd, 2006 03:08 PM

Re: Need help with banning and hackers
 
If you really want to get rid of a troublemaker with a dynamic IP, ban ranges is the only way to go.

You can do an IP range ban at any stage, so if you use it cleverly, you won't need to knock out a whole city.

As for changing their entire IP... Well, I don't know about America, but here in Europe, people don't choose their IPs, they get them assigned by their ISP. So, it's doubtful anyone can willingly change their entire IP address.

I myself have a dynamic IP which changes every time I disconnect then reconnect, and I'll only get a completely different IP once a month, at the most.

There is an alternative method - try and find out if they have a DNS hostname, and if they do, enter their hostname instead of the IP. That way, whenever they connect to the net with that DNS hostname enabled, it is, in effect, a lockout.

Other than that, there's not much you can do.

TacoPie July 2nd, 2006 03:42 PM

Re: Need help with banning and hackers
 
I didn't know you can ban a DNS hostname. Have you really done that to people ?

Eye Of Evil July 2nd, 2006 04:02 PM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by Kouen
If you really want to get rid of a troublemaker with a dynamic IP, ban ranges is the only way to go.

You can do an IP range ban at any stage, so if you use it cleverly, you won't need to knock out a whole city.

As for changing their entire IP... Well, I don't know about America, but here in Europe, people don't choose their IPs, they get them assigned by their ISP. So, it's doubtful anyone can willingly change their entire IP address.

I myself have a dynamic IP which changes every time I disconnect then reconnect, and I'll only get a completely different IP once a month, at the most.

There is an alternative method - try and find out if they have a DNS hostname, and if they do, enter their hostname instead of the IP. That way, whenever they connect to the net with that DNS hostname enabled, it is, in effect, a lockout.

Other than that, there's not much you can do.

Well can you give me the way to dynamic ban ppl?
And is there a place I can report on hackers on jka, like Lucasarts forums or somewhere else? I heard about some ppl got banned from Jedi Academy for hacking, dunno if its true thought.

TacoPie July 2nd, 2006 04:13 PM

Re: Need help with banning and hackers
 
No one can ban someone from the whole game if that's what you mean. I think you can report people to their ISP's for crashing etc, but I know at least in the USA, ISP's don't seem to care much anyway.
A "Dynamic IP ban" would be if someone had the IP 999.999.999.999 and you did AddIP 999.999.999.0 etc. That would ban anything 999.999.999 regardless of the last few numbers. You might also want to add the persons IP to the server.cfg Ban list so that persons IP stays banned even if the server gets rebooted etc.
If the first 2 or 3 parts of their IP also change, not much you can do without banning a ton of people.
What mod is your server using anyway ? Just curious.

Eye Of Evil July 3rd, 2006 12:30 AM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by TacoPie
No one can ban someone from the whole game if that's what you mean. I think you can report people to their ISP's for crashing etc, but I know at least in the USA, ISP's don't seem to care much anyway.
A "Dynamic IP ban" would be if someone had the IP 999.999.999.999 and you did AddIP 999.999.999.0 etc. That would ban anything 999.999.999 regardless of the last few numbers. You might also want to add the persons IP to the server.cfg Ban list so that persons IP stays banned even if the server gets rebooted etc.
If the first 2 or 3 parts of their IP also change, not much you can do without banning a ton of people.
What mod is your server using anyway ? Just curious.

Lugormod, if il do 999.999.999 it will ban only him and ppl around him?
And what can I do about hackers? nothing else?

TacoPie July 3rd, 2006 10:14 AM

Re: Need help with banning and hackers
 
Hi: As you prolly know, replace the 999.999.999.0 with hackers real IP, the "9s" are just an example. And yes, it should only ban him and those around him. I don't know alot about Lugormod but I can find out perhaps. What version are you using and what exactly does this hacker do to your server?
If it's crashing, there are several ways to crash a JKA server, regardless of the mod you are using, but some can be fixed (not sure if this is your problem or not)

Eye Of Evil July 3rd, 2006 12:22 PM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by TacoPie
Hi: As you prolly know, replace the 999.999.999.0 with hackers real IP, the "9s" are just an example. And yes, it should only ban him and those around him. I don't know alot about Lugormod but I can find out perhaps. What version are you using and what exactly does this hacker do to your server?
If it's crashing, there are several ways to crash a JKA server, regardless of the mod you are using, but some can be fixed (not sure if this is your problem or not)

Well from outside his sending crashing bots, they dont join the server, they just connect, and block other players from joining, this is like server list:
PLayer 1 score ping bla
etc
etc

Here:
f43904504ll - - - (they havent came yet)
d49038403098i - - -
Like this, once there was 16 of those.
The version is 1.1 of Lugormod, could be replaced soon, but thats the point.
I know he can crash server when his on, thats why I want to ban him so he wont come back, the bots I mostly stops by restarting map if I get to it on time, once he even made it to get the rcon.

Mikouen July 3rd, 2006 12:32 PM

Re: Need help with banning and hackers
 
Denial of Service attack.

If someone's flooding your server with bots, just disable bots. Then they won't be able to do it any more.

TacoPie July 3rd, 2006 12:38 PM

Re: Need help with banning and hackers
 
Is the "bot" attack the same as the "fake player" one or is that 2 different things ?

S3phiroth July 3rd, 2006 01:02 PM

Re: Need help with banning and hackers
 
He means using programs/bots to flood the server with connections. I'm sure there are anti flood measures on both JA+ and ClanMod, JA+ doesn't have it already enabled though and I can't remember the command maybe someone else knows.

Eye Of Evil July 3rd, 2006 09:54 PM

Re: Need help with banning and hackers
 
I think they connect like playesr, only they are a kind of bots, thats why they wont be considered as bots I think and cant disable it, il try anyway thought.
So there is no way to ban them? they do whatever they want now they are changing ip, I saw a guy changing from like 61.xxxxxxx to 94.yyyyyy(Meaning, totally diffrent thing), thats impossible even to dyanmic ban.

Mikouen July 4th, 2006 01:41 AM

Re: Need help with banning and hackers
 
Just keep banning them until they're completely banned.

Otherwise, the only thing you can do is password your server.

Eye Of Evil July 4th, 2006 02:55 AM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by Kouen
Just keep banning them until they're completely banned.

Otherwise, the only thing you can do is password your server.

Well, dynamic ip of (example) 345.xxx.xxx.xx.x will ban allot of ppl around or?

S3phiroth July 4th, 2006 03:39 AM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by Eye Of Evil
Well, dynamic ip of (example) 345.xxx.xxx.xx.x will ban allot of ppl around or?

Yes.

TacoPie July 4th, 2006 08:28 AM

Re: Need help with banning and hackers
 
Quote:

Originally Posted by S3phiroth
He means using programs/bots to flood the server with connections. I'm sure there are anti flood measures on both JA+ and ClanMod, JA+ doesn't have it already enabled though and I can't remember the command maybe someone else knows.

I think JA+ (at least in 2.4 beta 2) has the jp_maxConnFromIP "2", if that's what you mean. I don't think clanmod has a similar setting but it's supposed to not crash from a DOS attack. Unfortunately I don't see anything in lugormod that would prevent those attacks. I have heard of trying bot_enable 0, not sure if that helps at all. As far as a "hackers" IP changing from 61 to 94, that is odd...


All times are GMT -7.

Powered by vBulletin®
Copyright ©2000 - 2016, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.