[mohaa] server hijacking

[Shaun Green]

Apparently there is a simple client side command that allows the restarting
of maps.   The experience I had today just really ticked me off.  3 or 4
peeps doing it and I had lost complete rcon control. (they never had rcon
control just the constant restarting seemed to jam the whole thing up)  Even
ssh to the main console on the server was useless. Someone on mohadmin.com
has a made a fix.  He hasnt posted it yet because anyone could download it
and get the new command. (he needs some guidance on hiding the command)  The
win32 user made fix has been encoded to disguise the command.  Lets hope we
can get this fixed.

CDN

----- Original Message ----- 
From: "Salsich, Luke" <LJS at protectorgroup.com>
To: <mohaa at icculus.org>
Sent: Tuesday, August 12, 2003 4:43 PM
Subject: RE: [mohaa] server hijacking


What they do is bind a series of keys to certain actions (like chat) and
this causes errors in the game that repeat endlessly -  This is what causes
the lag and usually a game crash. I haven't worked on finding a way to
prevent it as they only did this once to my servers.

Luke



-----Original Message-----
From: Anthony Quon [mailto:anthonyquon at hotmail.com]
Sent: Tuesday, August 12, 2003 3:56 PM
To: mohaa at icculus.org
Subject: Re: [mohaa] server hijacking



Yep there are 'hacking' clans that will come around and will initially
wallhack/aimbot a server to get a rise out of the server admins. Once the
admins try and kick these users, they will come back with taughts and msg
floods with their group website and etc and will eventually crash the
server. From what I hear, there are 10+ ways of crashing or restarting a
server...I'm not sure if they are just exagerating..but even if there aren't
10+ ways..there is at least one way since they are able to do it. I couldn't
find any traces in any log files since I don't normally turn logs up because
of the performance hit it causes....if anyone has any information, that
would be great.


Also, in regards to the map changes and etc in the initial post...are you
sure you disabled voting? This is definitely one way where they can vote
their way into changing a map. I have turned off voting for all my servers
since it's kinda useless anyway.

Thanks,
ANthony


>From: <MOH at digitalnines.com>
>Reply-To: mohaa at icculus.org
>To: <mohaa at icculus.org>
>Subject: Re: [mohaa] server hijacking
>Date: Tue, 12 Aug 2003 12:44:39 -0400
>
>I've also had players come in crashing some of our clients servers.  They
>spam some msg's and crash the servers and leave.  Last time we got an ip
>and ipchained him from the server.
>They seem to be spamming msg's (such as their site) or what not.  It
>scrolls down and then the server crashes.
>Any ideas ?
>
>   ----- Original Message -----
>   From: Shaun Green
>   To: mohaa at icculus.org
>   Sent: Tuesday, August 12, 2003 7:11 AM
>   Subject: [mohaa] server hijacking
>
>
>   It has come to my attention that players on the server can continually
>reload the map at will.  There is a command in the gamex86.dll that will
>allow anyplayer to restart the map. [without rcon]  As us linux admins do
>no use the gamex86.dll this needs patched on the linux ver.  A fix has been
>made for Microshaft servers.  Please someone help as I had 3 different
>people continually starting the map every 30 secs.
>
>   CDN

_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail