You are an unregistered user, you can register here
Navigation

Information

Site

Donations
If you wish to make a donation you can by clicking the image below.


Site Sponsor

BeyondUnreal News

 
Go Back   The Unreal Admins Page > Forums > Hosted Forums > Wormbos Area > General Chat

Reply
Thread Tools Display Modes
  #41  
Unread 27th January, 2009, 09:32 AM
UnrealFan UnrealFan is offline
Killing Spree
 
Join Date: Oct 2006
Posts: 19
Default what is this

Quote:
[2009-01-27 01:19:16] - [INSECURE CLIENT] ******* [ *******] IP: ******* Security ID: 1 using v3369, security state: PerformingMD5Checks
[2009-01-27 01:19:16] - Illegal Console Command: inject userflag 0
[2009-01-27 01:19:16] - in alias 'ToggleInjectUserFlag': inject userflag 1 | OnRelease inject userflag 0
[2009-01-27 01:23:57] - [Status] Map change, closing log file.
End log session for ONSOnslaughtGame on ONS-{UNK}UT99-RedneckNeighbors_V3_2 at Wednesday, 2009-01-27 01:23:57

this is actually me being logged while testing it on our clan server. I know im using anything illegal and most certainly not injecting anything anywhere , so what is that??!

P.S. now that i think about it, that didnt happen before i migrated my custom blacklist from beta26, i do have some MD5 checks in there as well as lots of blacklisted files, dont know if this will help pinpoint the issue.

Last edited by UnrealFan : 27th January, 2009 at 09:35 AM.
Reply With Quote
  #42  
Unread 27th January, 2009, 12:09 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

Quote:
Originally Posted by {DUB}VARDY View Post
hows about this:

- [INSECURE CLIENT] xxxx [ xxxx ] IP: xxxx Security ID: 5 using v3369, security state: Secure
- Illegal Console Command: inject
- typed in manually


i cant think of a 'good' reason to have that as a command
Probably just someone goofing around.
Quote:
Originally Posted by UnrealFan View Post
this is actually me being logged while testing it on our clan server. I know im using anything illegal and most certainly not injecting anything anywhere , so what is that??!

P.S. now that i think about it, that didnt happen before i migrated my custom blacklist from beta26, i do have some MD5 checks in there as well as lots of blacklisted files, dont know if this will help pinpoint the issue.
I recommend actually reading past the "[INSECURE CLIENT]" part, it clearly says what Anti TCC found. And I trust you know what keybinds you configured for yourself.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #43  
Unread 28th January, 2009, 12:13 AM
BuD1369's Avatar
BuD1369 BuD1369 is offline
Godlike
 
Join Date: Jul 2005
Location: The Land Of The Nearly Dead
Posts: 290
Default

Quote:
Originally Posted by BuD1369 View Post
[INSECURE CLIENT] *** [ *** ] IP: *** Security ID: 14 using v3369, security state: CheckRenderSettings
- Bad TimeDilation: 1.10
- Expected: 1.51
[Disconnect] *** [ *** ] IP: *** Security ID: 14 using v3369


Could you please shed a little light on this one please Wormbo.



Also, I had to remove Anti TCC from a server that was running UT2Vote57. When it is time to vote for next map, you could double click on a map from the list, or highlight it & hit submit & it wouldnt put it up for vote. I tried to log in as UT2Vote admin, I get the server msg that says Im logged in as admin, but when I open the vote menu & try to get into Game Setup the vote menu closes. No one can vote, we must wait for the vote timer to run out & let the server select a random map.

I removed TCC & everything is working like it should

Sorry for the double post, I couldnt find any info on "Bad TimeDilation:"
Reply With Quote
  #44  
Unread 28th January, 2009, 10:06 AM
UnrealFan UnrealFan is offline
Killing Spree
 
Join Date: Oct 2006
Posts: 19
Default

Quote:
Originally Posted by Wormbo View Post
Probably just someone goofing around.

I recommend actually reading past the "[INSECURE CLIENT]" part, it clearly says what Anti TCC found. And I trust you know what keybinds you configured for yourself.

thanks, did some digging in my user.ini file and found this line

Aliases[39]=(Command="inject userflag 1 | OnRelease inject userflag 0",Alias="ToggleInjectUserFlag")

not sure what it does and how the heck it got there in the first place, got rid of it now....
Reply With Quote
  #45  
Unread 30th January, 2009, 06:07 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

New release 3 available. See first post for download link.

What has changed since release 2?
  • Fixed the SET command filter, which incorrectly blocked "set Input [key] [command]".
  • Fixed a default prefetch check entry that could possibly cause false positives.
  • Improved key reset code for Input Inconsistency checks.
  • Addressed some crashes related to replaced shadow projectors (client) and cleanup of player ID log files. (server) Not sure if those are actually fixed now or were just symptoms of other problems.
  • The server's current and maximum tick rate is now displayed in the server details box of the server browser and mid-game menu rules tab.
  • Fixed not being able to look up or down when standing on moving vehicles.
  • Fixed not being able to fire while driving vehicles
  • Sanity check: Prevented running Anti TCC and SafeGame at the same time - they are simply not compatible.
  • Fixed client demo playback view direction.

Are there any known bugs in this release?
Unfortunately, yes:
  • The way Anti TCC secures the console breaks admin menu commands of UT2Vote up to version 57 and some other mods. (These mods access the console though InteractionMaster.Console, which conflicts with Anti TCC's secured console feature. This must be fixed in those mods, I can't do anything about it.)
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #46  
Unread 30th January, 2009, 07:24 PM
foibos foibos is offline
Forum Newcomer
 
Join Date: Aug 2008
Posts: 14
Default

Thank you. No. Thank you.
Reply With Quote
  #47  
Unread 30th January, 2009, 10:08 PM
ARsEnAl51's Avatar
ARsEnAl51 ARsEnAl51 is offline
Holy Shit!!
 
Join Date: Jul 2005
Posts: 800
Default

*hugs Wormbo*
Reply With Quote
  #48  
Unread 1st February, 2009, 11:03 AM
babooncunt babooncunt is offline
Forum Newcomer
 
Join Date: Mar 2006
Posts: 4
Default final

I like the fact that this new string of detection is not posted as FINAL. couple quick questions, and possible enhancement. 1: Does this version scan memory? or just stored data? 2: using hitplots as a possible detection method, would it not be a good thing to save hitscan shots by player id for each map in an xy plot? over time these plots could be verified against trig/aimbot emergent pattern. If this data is stored in playerid.ini you can take a history plot it and cross reference with a given helios pattern.

-babs
Reply With Quote
  #49  
Unread 1st February, 2009, 12:48 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

Plot data would be far too large for an INI file, I think. It would have to take near-misses into account, head location (which changes as a player moves), aiming on partially covered players (which is hard to examine), etc.
Some bots even aim for different body parts, have different way to compensate ping, different way to actually aim, and so on.

Also, how do you count shots at groups of players? Hard to tell, which player was actually aimed at if someone else is hit.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #50  
Unread 4th February, 2009, 06:04 PM
wizzap wizzap is offline
Forum Newcomer
 
Join Date: Feb 2009
Posts: 2
Cool

Hi

I have some questions about antitcc..

Firstly, I was trying antitcc 2009 on my serv and it seems to mess up ambient sound on maps. There are several maps on the serv which use ambient sound with large radius to play music across the map, and when antitcc was in use it seemed to disable the music. I thought it might be something to do with the lock rolloff feature but I turned that off and it was still disabling the ambient sound. I looked the problem up and saw that someone else had the same problem with a previous version back in 2006 here: http://forums.epicgames.com/archive/...?t-516295.html but no one has posted a solution there.

Ok and two other small things - I was wondering if it's possible to add a new "allowed class" to antitcc, and also if it's possible to disable that extra countdown it puts in. After a 15 second practise round the game usually starts straight away but with antitcc running it adds an extra 10 second countdown after the practise round has ended.. which is a little annoying.

So yeh other than the ambient sound problem it a great security mut and I think it's quite a bit better than previous versions

thanks
Reply With Quote
  #51  
Unread 5th February, 2009, 06:56 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

Hmm, forgot about the practice round. That additional delay is for performing an end-game check at the end of a round.

Allowed classes are all classes available on the server, unless they are explicitly blacklisted, of course. To prevent players from being kicked for certain unknown classes, simply make sure those classes are installed on the server. I guess I could somehow link it to MD5 checks, i.e. classes in MD5-checked packages are automatically allowed.

The ambient sound music thing is intentional and I won't change it. Any ambient sound with a duration of more than 60 seconds is disabled.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #52  
Unread 5th February, 2009, 07:11 PM
wizzap wizzap is offline
Forum Newcomer
 
Join Date: Feb 2009
Posts: 2
Wink

Quote:
Originally Posted by Wormbo View Post
Hmm, forgot about the practice round. That additional delay is for performing an end-game check at the end of a round.

Allowed classes are all classes available on the server, unless they are explicitly blacklisted, of course. To prevent players from being kicked for certain unknown classes, simply make sure those classes are installed on the server. I guess I could somehow link it to MD5 checks, i.e. classes in MD5-checked packages are automatically allowed.

The ambient sound music thing is intentional and I won't change it. Any ambient sound with a duration of more than 60 seconds is disabled.
Oh ok thanks for the reply but couldn't you at least make the disabling ambient sound thing optional..

I really want to use antitcc on my serv because I think it's the best security mut out there but if it changes the way certain maps should be then that's a pretty big negative aspect :/
Reply With Quote
  #53  
Unread 7th February, 2009, 08:30 PM
ARsEnAl51's Avatar
ARsEnAl51 ARsEnAl51 is offline
Holy Shit!!
 
Join Date: Jul 2005
Posts: 800
Default

A player tried to join our server with a bot installed. When I checked the log, it showed basically showed this :
Code:
 -      Found disallowed file(s) 'ZelliusBot.u'
 -      Matching custom blacklist wildcard '*Zellius*'
 -      (Please check that there's actually a match, otherwise it's a false 
 -      Found disallowed file(s) 'ZelliusBot.iniZelliusBot.u'
 -      Matching default blacklist wildcard 'Zellius*.*'
 -      (Please check that there's actually a match, otherwise it's a false positive.)
The two files detected are not separated in the output, but that's no big deal. What somewhat worries me though, is that the custom wildcard seems to only have caught one of those two files. So, my question is: does AntiTCC only checks for matching .u files when no extension is specified in a DisallowedFile entry?
Reply With Quote
  #54  
Unread 7th February, 2009, 10:43 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

No '.' or '\' or '/' means Anti TCC will perform a package search based on the client's Paths=... list. (The * in the Paths entry is replaced with the string you specified.) If you want to look for files with any extension in the System directory, either append '.*' or prepend './' to turn it into a regular file wildcard.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #55  
Unread 8th February, 2009, 10:00 AM
ARsEnAl51's Avatar
ARsEnAl51 ARsEnAl51 is offline
Holy Shit!!
 
Join Date: Jul 2005
Posts: 800
Default

Oki, thanks
Reply With Quote
  #56  
Unread 8th February, 2009, 11:16 AM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

BTW: To find files without an extension, append a '.'.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #57  
Unread 13th February, 2009, 11:17 AM
ARsEnAl51's Avatar
ARsEnAl51 ARsEnAl51 is offline
Holy Shit!!
 
Join Date: Jul 2005
Posts: 800
Default

Could you add a webadmin page to customize the blacklist and MD5 checks please?
Reply With Quote
  #58  
Unread 13th February, 2009, 06:37 PM
foibos foibos is offline
Forum Newcomer
 
Join Date: Aug 2008
Posts: 14
Default

Quote:
Originally Posted by ARsEnAl51 View Post
Could you add a webadmin page to customize the blacklist and MD5 checks please?
It would be nice.
Reply With Quote
  #59  
Unread 12th March, 2009, 03:48 PM
Wormbo's Avatar
Wormbo Wormbo is offline
out of order
 
Join Date: Sep 2003
Posts: 3,383
Default

Release 4 is out!

What has changed since release 3?
  • Fixed a rotation lock problem that could affect player rotation on end of AVRiL lock.
  • Fixed a display bug in the WhoWas command.
  • In Assault, the ResetTimeDelay is only extended to at least 15 seconds if the practice round is disabled.
  • Long ambient sounds are only disabled if the client has disabled music.
  • Unknown classes in packages that don't exist on the server will no longer be reported if the package is in the list of MD5 checks. This means you don't need to install voice and announcer packs on your server anymore just to allow them on clients. A QuickMD5 (or FullMD5) entry will be enough to "whitelist" them.
  • Added detection and workaround for player slot exploits.
  • Merged in Custom Punishments code. Admins (including silently logged-in ones) can now slap or kill annoying players.
  • Improved efficiency of blacklisted keybind detection.
  • Added 'Mutate AntiTCC GetServerTickRate' (or 'GetServerTickRate' for short), which will display the server's current tick rate in the console.

Quote:
Originally Posted by ARsEnAl51 View Post
Could you add a webadmin page to customize the blacklist and MD5 checks please?
Maybe for release 5.
__________________
Wormbo's UT/UT2004/UT3 mods | PlanetJailbreak | Unreal Wiki | Liandri Archives
Quote:
<@Mych|Lockdown> ...and the award for the most creative spelling of "Jailbreak" goes to ... "Gandis Jealbrake Server"
Reply With Quote
  #60  
Unread 12th March, 2009, 04:05 PM
foibos foibos is offline
Forum Newcomer
 
Join Date: Aug 2008
Posts: 14
Default

Uploading. Thank you.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT +1. The time now is 05:49 AM.


Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.

All pages are copyright The Unreal Admins Page.
You may not copy any pages without our express permission.