Re: [hlds] RCon Bad Password Exploit/Crash
for us noobs, can you elaborate this, are you saying if you use the wrong password and issue ANY rcon command the server will crash? On Sun, Aug 3, 2008 at 3:42 PM, Matthew Crain [EMAIL PROTECTED]wrote: It looks like the RCon bad password crash is back following this last update. I was able to reproduce it by sending a command to the server via my ingame console and using the wrong password. Once the server kicked/banned me, it crashed. Hopefully, Valve can include the regression fix with the _resetgamestats exploit. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] RCon Bad Password Exploit/Crash
Rcon bans someone for too many failed password attempts (to discourage guessing/brute forcing). Currently, when it tries to ban someone, it just flat out crashes instead. You can fix this by blocking rcon access for all IPs but ones you pre-approve, with whatever firewall you're using on your server. Rcon uses TCP on your servers port (27015 by default), all other game traffic uses UDP. - Neph chillicane wrote: for us noobs, can you elaborate this, are you saying if you use the wrong password and issue ANY rcon command the server will crash? On Sun, Aug 3, 2008 at 3:42 PM, Matthew Crain[EMAIL PROTECTED]wrote: It looks like the RCon bad password crash is back following this last update. I was able to reproduce it by sending a command to the server via my ingame console and using the wrong password. Once the server kicked/banned me, it crashed. Hopefully, Valve can include the regression fix with the _resetgamestats exploit. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] RCon Bad Password Exploit/Crash
Might want to add that downloads also use tcp 27015 if you don't have a separate sv_downloadurl Nephyrin Zey wrote: Rcon bans someone for too many failed password attempts (to discourage guessing/brute forcing). Currently, when it tries to ban someone, it just flat out crashes instead. You can fix this by blocking rcon access for all IPs but ones you pre-approve, with whatever firewall you're using on your server. Rcon uses TCP on your servers port (27015 by default), all other game traffic uses UDP. - Neph chillicane wrote: for us noobs, can you elaborate this, are you saying if you use the wrong password and issue ANY rcon command the server will crash? On Sun, Aug 3, 2008 at 3:42 PM, Matthew Crain[EMAIL PROTECTED]wrote: It looks like the RCon bad password crash is back following this last update. I was able to reproduce it by sending a command to the server via my ingame console and using the wrong password. Once the server kicked/banned me, it crashed. Hopefully, Valve can include the regression fix with the _resetgamestats exploit. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] RCon Bad Password Exploit/Crash
You can also set the following to a stupidly high number until Valve fixes it (if, for instance, you don't have access to the firewalls on your servers.) sv_rcon_maxfailures : 10 : : Max number of times a user can fail rcon authentication before being banned sv_rcon_minfailures : 5 : : Number of times a user can fail rcon authentication in sv_rcon_minfailuretime before being banned sv_rcon_minfailuretime : 30 : : Number of seconds to track failed rcon authentications Well, except for the third one, which you should set lower. ;) Nephyrin Zey wrote: Rcon bans someone for too many failed password attempts (to discourage guessing/brute forcing). Currently, when it tries to ban someone, it just flat out crashes instead. You can fix this by blocking rcon access for all IPs but ones you pre-approve, with whatever firewall you're using on your server. Rcon uses TCP on your servers port (27015 by default), all other game traffic uses UDP. - Neph chillicane wrote: for us noobs, can you elaborate this, are you saying if you use the wrong password and issue ANY rcon command the server will crash? On Sun, Aug 3, 2008 at 3:42 PM, Matthew Crain[EMAIL PROTECTED]wrote: It looks like the RCon bad password crash is back following this last update. I was able to reproduce it by sending a command to the server via my ingame console and using the wrong password. Once the server kicked/banned me, it crashed. Hopefully, Valve can include the regression fix with the _resetgamestats exploit. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[hlds] (no subject)
Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[hlds] (no subject)
let rooms and use my mail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
quit posting pointless things, thanks. learn how to use a mailing list. On Sun, Aug 3, 2008 at 12:27 PM, Admin Elite HS [EMAIL PROTECTED]wrote: let rooms and use my mail ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] RCon Bad Password Exploit/Crash
You can't set them too high really: sv_rcon_maxfailures = 10 min. 1.00 max. 20.00 sv_rcon_minfailures = 5 min. 1.00 max. 20.00 But you can lower it to one second... So unless someone is spamming it you should be fine: sv_rcon_minfailuretime = 30 min. 1.00 On Sun, Aug 3, 2008 at 11:45 AM, Cc2iscooL [EMAIL PROTECTED] wrote: You can also set the following to a stupidly high number until Valve fixes it (if, for instance, you don't have access to the firewalls on your servers.) sv_rcon_maxfailures : 10 : : Max number of times a user can fail rcon authentication before being banned sv_rcon_minfailures : 5 : : Number of times a user can fail rcon authentication in sv_rcon_minfailuretime before being banned sv_rcon_minfailuretime : 30 : : Number of seconds to track failed rcon authentications Well, except for the third one, which you should set lower. ;) Nephyrin Zey wrote: Rcon bans someone for too many failed password attempts (to discourage guessing/brute forcing). Currently, when it tries to ban someone, it just flat out crashes instead. You can fix this by blocking rcon access for all IPs but ones you pre-approve, with whatever firewall you're using on your server. Rcon uses TCP on your servers port (27015 by default), all other game traffic uses UDP. - Neph chillicane wrote: for us noobs, can you elaborate this, are you saying if you use the wrong password and issue ANY rcon command the server will crash? On Sun, Aug 3, 2008 at 3:42 PM, Matthew Crain[EMAIL PROTECTED] wrote: It looks like the RCon bad password crash is back following this last update. I was able to reproduce it by sending a command to the server via my ingame console and using the wrong password. Once the server kicked/banned me, it crashed. Hopefully, Valve can include the regression fix with the _resetgamestats exploit. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] New TF2 Crash
Yes, I concur. Thanks... On Sun, Aug 3, 2008 at 12:38 AM, chillicane [EMAIL PROTECTED] wrote: thanks for letting us know about this, also thanks for the Sourcemod plugin, works great. On Sun, Aug 3, 2008 at 1:20 AM, Cc2iscooL [EMAIL PROTECTED] wrote: It's not a metamod plugin. It's a very basic Valve plugin. DontWannaName! wrote: If you have sourcemod it would probably take up less resources to use this plugin so you dont have to add a mm plugin. http://forums.alliedmods.net/showthread.php?p=648834 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
oops! On 8/4/08, Spencer 'voogru' MacDonald [EMAIL PROTECTED] wrote: Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
Doh! Don't worry, I really don't think anyone cares, it's not very useful for anything any who. - Original Message From: chillicane [EMAIL PROTECTED] To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com Sent: Sunday, August 3, 2008 3:35:01 PM Subject: Re: [hlds] (no subject) oops! On 8/4/08, Spencer 'voogru' MacDonald [EMAIL PROTECTED] wrote: Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: *edited* Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
LOL Someone made a boo boo chillicane wrote: oops! On 8/4/08, Spencer 'voogru' MacDonald [EMAIL PROTECTED] wrote: Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
quick, steal his identity via hlds mailing list! On Mon, Aug 4, 2008 at 7:45 AM, Tom Leighton [EMAIL PROTECTED]wrote: LOL Someone made a boo boo chillicane wrote: oops! On 8/4/08, Spencer 'voogru' MacDonald [EMAIL PROTECTED] wrote: Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] (no subject)
I'm on it. I already got 50k of credit in his name and I'm about to go on a spending spree. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chillicane Sent: Sunday, August 03, 2008 8:14 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] (no subject) quick, steal his identity via hlds mailing list! On Mon, Aug 4, 2008 at 7:45 AM, Tom Leighton [EMAIL PROTECTED]wrote: LOL Someone made a boo boo chillicane wrote: oops! On 8/4/08, Spencer 'voogru' MacDonald [EMAIL PROTECTED] wrote: Oooh... a password! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin Elite HS Sent: Sunday, August 03, 2008 12:03 PM To: hlds@list.valvesoftware.com Subject: [hlds] (no subject) Welcome to the hlds@list.valvesoftware.com mailing list! To post to this list, send your email to: hlds@list.valvesoftware.com General information about the mailing list is at: http://list.valvesoftware.com/mailman/listinfo/hlds If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://list.valvesoftware.com/mailman/options/hlds/elite.hs%40hotmail.com You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: mik987mik987 Normally, Mailman will remind you of your list.valvesoftware.com mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Chillidog Systems - Re-inventing the wheel for the sake of all humanity! ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
