[mohaa] server hijacking

[Shaun Green]

Does anyone actually no the command that restarts the map?  I think the best
way to fix this problem is edit the linux binaries and change the command to
something only you would know.  That way there wouldnt be any chance of it
being discovered.  I will have to investigate and find out what the actual
command is.  If you know it please dont post it.

CDN
----- Original Message ----- 
From: "Bradley Caricofe" <Caricofe at Comcast.net>
To: <mohaa at icculus.org>
Sent: Tuesday, August 12, 2003 5:37 PM
Subject: RE: [mohaa] server hijacking


> If this is true then basically all MOHAA servers are rendered completely
> worthless to the people running them.  I have a friend who runs a very
busy
> MOH server, he recently put it on permanent passwd protection to stop the
> cheaters and the crackers from getting in.  Sad...
>
> > -----Original Message-----
> > From: Shaun Green [mailto:greensha at rogers.com]
> > Sent: Tuesday, August 12, 2003 5:29 PM
> > To: mohaa at icculus.org
> > Subject: Re: [mohaa] server hijacking
> >
> >
> > Apparently there is a simple client side command that allows the
> > restarting
> > of maps.   The experience I had today just really ticked me off.  3 or 4
> > peeps doing it and I had lost complete rcon control. (they never had
rcon
> > control just the constant restarting seemed to jam the whole
> > thing up)  Even
> > ssh to the main console on the server was useless. Someone on
mohadmin.com
> > has a made a fix.  He hasnt posted it yet because anyone could download
it
> > and get the new command. (he needs some guidance on hiding the
> > command)  The
> > win32 user made fix has been encoded to disguise the command.
> > Lets hope we
> > can get this fixed.
> >
> > CDN
> >
> > ----- Original Message -----
> > From: "Salsich, Luke" <LJS at protectorgroup.com>
> > To: <mohaa at icculus.org>
> > Sent: Tuesday, August 12, 2003 4:43 PM
> > Subject: RE: [mohaa] server hijacking
> >
> >
> > What they do is bind a series of keys to certain actions (like chat) and
> > this causes errors in the game that repeat endlessly -  This is
> > what causes
> > the lag and usually a game crash. I haven't worked on finding a way to
> > prevent it as they only did this once to my servers.
> >
> > Luke
> >
> >
> >
> > -----Original Message-----
> > From: Anthony Quon [mailto:anthonyquon at hotmail.com]
> > Sent: Tuesday, August 12, 2003 3:56 PM
> > To: mohaa at icculus.org
> > Subject: Re: [mohaa] server hijacking
> >
> >
> >
> > Yep there are 'hacking' clans that will come around and will initially
> > wallhack/aimbot a server to get a rise out of the server admins. Once
the
> > admins try and kick these users, they will come back with taughts and
msg
> > floods with their group website and etc and will eventually crash the
> > server. From what I hear, there are 10+ ways of crashing or restarting a
> > server...I'm not sure if they are just exagerating..but even if
> > there aren't
> > 10+ ways..there is at least one way since they are able to do it.
> > I couldn't
> > find any traces in any log files since I don't normally turn logs
> > up because
> > of the performance hit it causes....if anyone has any information, that
> > would be great.
> >
> >
> > Also, in regards to the map changes and etc in the initial post...are
you
> > sure you disabled voting? This is definitely one way where they can vote
> > their way into changing a map. I have turned off voting for all my
servers
> > since it's kinda useless anyway.
> >
> > Thanks,
> > ANthony
> >
> >
> > >From: <MOH at digitalnines.com>
> > >Reply-To: mohaa at icculus.org
> > >To: <mohaa at icculus.org>
> > >Subject: Re: [mohaa] server hijacking
> > >Date: Tue, 12 Aug 2003 12:44:39 -0400
> > >
> > >I've also had players come in crashing some of our clients servers.
They
> > >spam some msg's and crash the servers and leave.  Last time we got an
ip
> > >and ipchained him from the server.
> > >They seem to be spamming msg's (such as their site) or what not.  It
> > >scrolls down and then the server crashes.
> > >Any ideas ?
> > >
> > >   ----- Original Message -----
> > >   From: Shaun Green
> > >   To: mohaa at icculus.org
> > >   Sent: Tuesday, August 12, 2003 7:11 AM
> > >   Subject: [mohaa] server hijacking
> > >
> > >
> > >   It has come to my attention that players on the server can
continually
> > >reload the map at will.  There is a command in the gamex86.dll that
will
> > >allow anyplayer to restart the map. [without rcon]  As us linux admins
do
> > >no use the gamex86.dll this needs patched on the linux ver.  A
> > fix has been
> > >made for Microshaft servers.  Please someone help as I had 3 different
> > >people continually starting the map every 30 secs.
> > >
> > >   CDN
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
>