What if its more than one game server people are downloading from...

----- Original Message ----
From: Rick Payton <[EMAIL PROTECTED]>
To: Half-Life dedicated Win32 server mailing list <hlds@list.valvesoftware.com>
Sent: Friday, October 17, 2008 5:58:23 PM
Subject: Re: [hlds] fast dl abuse

A quick google search returned this from a forum from 3 years ago, that
seemed to work well enough for me:

RewriteEngine On
RewriteCond %{HTTP_REFERER} !^hl2://0.0.0.0:
RewriteCond %{HTTP_USER_AGENT} !^Half-Life\ 2$
RewriteRule ^(.*)$ $1 [F]

I changed the 0.0.0.0 to (x.x.x.x|y.y.y.y) in the .htaccess file. While
my client was able to successfully download the map, using a web browser
I was forbidden to view the directory.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Donnie Newlove
Sent: Friday, October 17, 2008 2:05 PM
To: Half-Life dedicated Win32 server mailing list
Subject: Re: [hlds] fast dl abuse

I stand corrected, the most elegant way would of course be to only
allow downloads from hosts that are already connected or connecting to
the game server.

On Sat, Oct 18, 2008 at 1:28 AM, Karl Weckstrom <[EMAIL PROTECTED]>
wrote:
> You HAVE to restrict access via IP on the webserver itself. Sadly
there's no other way.
>
> Turning off directory browsing is useless, as they'll find out the
path anyway. Valve opted to use Internet Explorer as their internal game
browser, which leverages WININET.DLL.
>
> http://support.microsoft.com/kb/884931
>
> As you can see from the above URL, you can download a debug version of
wininet.dll to troubleshoot IE issues. This will reveal absolutely all
details about the transfer, including all paths. It's pointless to try
and obscure your map download url, it simply needs to be restricted by
IP on the webserver.
>
>
> ________________________________________
> From: [EMAIL PROTECTED]
[EMAIL PROTECTED] On Behalf Of Cc2iscooL
[EMAIL PROTECTED]
> Sent: Friday, October 17, 2008 7:04 PM
> To: Half-Life dedicated Win32 server mailing list
> Subject: Re: [hlds] fast dl abuse
>
> Unfortunately this also shows in the "sv_downloadurl," but yes, that
> would limit it quite a bit.
>
> Steve wrote:
>> The first thing I would do (which I have already done) is disable
>> directory browsing on all those folders.. no reason to let the search
>> engines crawl through all your files so they can indexed up on
google.
>>
>>
>>
>>> Hi Listy,
>>>
>>> I think my fast dl webspace is being leeched.
>>>
>>> I can find thousands of tf/maps directorys to browse and potentially
hook
>>> into and use the url in my server.cfg
>>>
>>> Is there any way of preventing any connections to my fast dl server
other
>>> than my own game server (via IP:port)
>>>
>>> Love to all
>>>
>>> Pat xxx
>>> _______________________________________________
>>> To unsubscribe, edit your list preferences, or view the list
archives,
>>> please visit:
>>> http://list.valvesoftware.com/mailman/listinfo/hlds
>>>
>>>
>>
>>
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list
archives, please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds
>>
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to