ok, there a question about populated server and cheater.

[bloodedge]

ok.

i ask serious help here.

there a way to ban cheater name hostnamban, so it seem like a cheater on my server can pass hostnameban.. i got he's ip and make a lookup, and we can't see he's complete hostname... then there no way to ban it..

first question ...
if a player can change ip, hide hostname, and change asc guid "tooo easy to do..." then - How can i ban this player?
we tryed tring ban so it don'T work with my host
i hear about reverse dns.... but.. i would like to hear more about ban reverse dns...

or let me know if there is another way to ban it..


SECOND QUESTION.
there another guy that find a new way to crash my populated serverwith a package named 'NULL'

it seem like this way to crash server is new from a couple day...
well i addad in the EUTServer.ini a IllegalMods like for disallow use for package named 'NULL'. but well they will rpobably recompilet itwith another name probably...

then thanks for everyone can help me.
i have a public sniper low.g 16 slot populated server.

and before HostNameBan was doing the work perfectly, so now they can pass hostnameban and find a new way to crash server..

i need to know how tog et rid of these cheater.
thanks,

NOTE: everyone want to talk to me in msn add:

<--- My Msn
or other info is in my sig

[Shambler]

Post the error with NULL in it, also post the hostnames you get for the player. (even if they are only partial or completely messed)

[bloodedge]

ip: 70.249.1.196
dns i got
IP address: 70.249.1.196
Reverse DNS: [No reverse DNS entry per ns1.swbell.net.]

OLD info from this same guy:
he's old hostname in the past
ppp-70-242-97-122.dsl.rcsntx.swbell.net
and he's old ip: 70.242.97.122
...
form there: http://www.dnsstuff.com/tools/ipall.ch?ip=70.249.1.196

about the 'NULL' it's only like when a player try load a package that is not in the serverpackages lines.

and after server crash.
well i not keep log from these crash, it's from 2 or 3 day and they seem to stopped. other dya they did crash server 6 time.. 1 crash after the other... :S

so the error line i go form the crash.log was giving really less info
i think ti was something like:
Warning: Failed to load 'NULL': Can't find file for package 'NULL'
so i remember to have see this line at the end of EACH crash log when it was this guy crashing the server.

then op server exit, and log close in a couple line...
or something like this...

and he also can bot in server with external cheat injected in memory, "i don't use utdc i think itlag server"
using ubertunnel or sometihng like this as a tcp tunnel/proxy for hide he's setting...

[Shambler]

Originally Posted by bloodedge

Warning: Failed to load 'NULL': Can't find file for package 'NULL'

That doesn't look like a crash from UT1

EDIT: Or perhaps I'm wrong, I don't really play UT1 but still assumed that particular error was UnrealEngine2 specific.

[LeeBe]

Originally Posted by Shambler

That doesn't look like a crash from UT1

EDIT: Or perhaps I'm wrong, I don't really play UT1 but still assumed that particular error was UnrealEngine2 specific.

I have seen that before for UT, but dont know a fix.

NetComeGo: Open MyLevel Fri Sep 22 19:54:35 2006 83.124.30.28:2867
Log: Client netspeed is 10000
Warning: Failed to load 'NULL': Can't resolve package name
Exit: Exiting.
Uninitialized: Name subsystem shut down
Uninitialized: Allocation checking disabled
Uninitialized: Log file closed, Fri Sep 22 19:54:36 2006

[Durp]

Hai Bloodedge :x
If someone bypasses HostNameBan, you should stop trying to ban him, since it will do no good :/

[Taragon]

...

anyways, perhaps you could try to ban his nickname. cheaters really dislike the fact when they aren't 'known' to the world anymore.

For as far as HostNameBan, perhaps Matthew knows the perfect way to filter him out

Also, are there any anti-cheat logs? (UTDC, etc.)

[Shambler]

Originally Posted by LeeBe

I have seen that before for UT, but dont know a fix.

NetComeGo: Open MyLevel Fri Sep 22 19:54:35 2006 83.124.30.28:2867
Log: Client netspeed is 10000
Warning: Failed to load 'NULL': Can't resolve package name
Exit: Exiting.
Uninitialized: Name subsystem shut down
Uninitialized: Allocation checking disabled
Uninitialized: Log file closed, Fri Sep 22 19:54:36 2006

I've been told (after some discussion about this thread) that this is actually a really old crash....the latest UTPG patches should fix it methinks. (tho I'm not 100% certain about that)

[bloodedge]

Log: Client netspeed is 10000
Warning: Failed to load 'NULL': Can't resolve package name
Exit: Exiting.
Uninitialized: Name subsystem shut down
Uninitialized: Allocation checking disabled
Uninitialized: Log file closed, Wed Dec 13 19:21:32 2006


got this right after a client join...

[A|ice]

so...it just shut the server down.

this was not the same person who usually does it?



A|ice

[Matthew]

Originally Posted by Durp

Hai Bloodedge :x
If someone bypasses HostNameBan, you should stop trying to ban him, since it will do no good :/

Well Sanca you know as well as I do how those bans are being bypassed - and you and I also both know that you can only troll for so many ways around HB before options become harder and harder to find

[Durp]

We do?

[Matthew]

heh

[bloodedge]

Originally Posted by A|ice

so...it just shut the server down.

this was not the same person who usually does it?



A|ice

none usualliy crash the server. i had crashing problem in the past so it was not someone was chashing it, iw was only some setting in the ut... we played soo much with thesse setthing that we have stopped server to crash itself because of buffer error..

and the hacker crashing the server is new, it jsust started the last day, he come on server crash ti with a package named 'NULL'. server reboot itself.. he come back again.. and continu lke this since he crash server 7-8 time and when there leave no player on server he go do it in other server...

[bloodedge]

Originally Posted by Matthew

Well Sanca you know as well as I do how those bans are being bypassed - and you and I also both know that you can only troll for so many ways around HB before options become harder and harder to find

i don'T know how to bypass hostname ban.. he's probably using he's own dns or dns proxy.. if you know how to block him, and if you ca help me for block him let me know thnaks.

[Limey]

I have coded a fix for this Crash exploit its just a hack that fixes the vulnerability
source is included since it is written in c++ so it can be looked over and or compiled
by anyone who cares to use it or whatever. only tested on ut436 but i'm under the
impression any newer patch fixes this ?

http://www.freewebs.com/utlimey/Over...ssCrashFix.rar

Regards.

[bloodedge]

thanks you i will try it. my server ru 440.

so is it working with linux server?
nahh it's working only with windows and my sverer is linux :S

[Limey]

Sorry i dont have linux to compile a version for you.
Under windows you just place the dll into system dir the
game will load it

[bloodedge]

well now they have the .cpp files, i think someone around here will move and code this for linux

so how it work under windows?
there is not BotPack.dll file in my ut under windows..
and only upload the file will work?
no need to add a line in ut for he know to load this new file?

well if you want to save time we can msn:

is there any website or community that i can go ask if they can code it for linux?

[Matthew]

Ironic.