Re: [hlds_linux] serious security issue on CSS servers, exposed system command

2006-04-06 Thread Philip Lorenz

The problem is that it simply is not possible. A malicious user may
simply overwrite the Srcds binaries to execute any code he wants (hence
this problem is not only related to the srcds but any program out
there (if you do not chroot() it or run each server under their own user
account and make sure your system is patched)).
End of the story is that Valve cannot fix this feature.

Philip

Adam Grzesko wrote:

Hi Ian,

Thursday, April 6, 2006, 5:58:53 PM, you wrote:

Im --
Im [ Picked text/plain from multipart/alternative ]
Im This is a serious risk. All they need is ftp access, and essentially they
Im can now have ssh access. A simple one liner (even as an under privileged
Im user) can take the whole machine down (tried and tested).

Im Only way around not letting them install it is to remove ftp access. I'll
Im wager 99% of the servers out there have ftp access to upload maps and mods.

Im Its a bad oversight by Valve, and they should have some method of either
Im preventing it, or having it disabled as an option (just like you would a
Im webserver for example not allowing shell execs).

That's exactly my point.

best regards,
Adam Grzesko
[EMAIL PROTECTED]


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] serious security issue on CSS servers, exposed system command

2006-04-06 Thread Philip Lorenz

And you think you aren't able to execute system commands using metamod?
Anything which ends up being a binary can contain malicious code which
will then be executed.
Rather than choosing a secure setup you may simply want to ban Metamod,
SourceMM and anything else which allows binary plugins from your
customers servers.

Philip

Adam Grzesko wrote:

Hi Philip,

Thursday, April 6, 2006, 6:31:55 PM, you wrote:

PL The problem is that it simply is not possible. A malicious user may
PL simply overwrite the Srcds binaries to execute any code he wants (hence
PL this problem is not only related to the srcds but any program out
PL there (if you do not chroot() it or run each server under their own user
PL account and make sure your system is patched)).
PL End of the story is that Valve cannot fix this feature.

No. You are wrong. You may block some file names not to be overrwriten
by FTP like binaries that server runs or even block all executable files
to be overwritten. So this way customers cannot
upload own binaries. This is how we do it.

But hence customers have
free ftp access to other server files, to move administrative task to
themselves, they are allowed to put any plugin they want.


best regards,
Adam Grzesko
[EMAIL PROTECTED]


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] serious security issue on CSS servers, exposed system command

2006-04-06 Thread Philip Lorenz

You do understand the point that plugins are binaries and therefore may
contain code you do not want them to have?

So there are two solutions to your concern:
1. Disable any server plugins (disallow write access to the addons folder)
2. Secure your gameserver install

There is no other solution to this.

Also you are talking about this plugin. The plugin doesn't do any
magic. It simply uses the system() call to execute a standalone binary.
In case you decide to block the system() command using LD_PRELOAD or
something alike the malicious user can simply use assembly to call the
functions needed to spawn a shell on the server.

Philip

Adam Grzesko wrote:

Hi Philip,

Thursday, April 6, 2006, 6:46:31 PM, you wrote:

PL And you think you aren't able to execute system commands using metamod?
PL Anything which ends up being a binary can contain malicious code which
PL will then be executed.
Yes, but all essential files (on our servers) are marked executable
and customer may not overwrite it.

PL Rather than choosing a secure setup you may simply want to ban Metamod,
PL SourceMM and anything else which allows binary plugins from your
PL customers servers.
With this plugin the following scenario is possible:

Example scenario:
--
1. Upload a text file, like cpp or any other program.
2. Compile it with g++ or gcc or with any other compiler available in
the system.
3. Run compiled program via the plugin system command.


best regards,
Adam Grzesko
[EMAIL PROTECTED]


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Setting up GDB to Automatically Run Server and Log Segfault Backtraces

2006-01-17 Thread Philip Lorenz

Hi,

You might simply let the srcds core-dump and then load the file using
gdb (ulimit -c unlimited will produce a core-dump on segfault (-debug
parameters enables this but limits the core size to 2000 which often is
not enough resulting in corrupt core dumps)).

Regards,

Philip Lorenz

dackz wrote:


If you've been running into issues with the server crashing, you might
find running the server under GDB useful for seeing where the server
crashed. Of course the only problem with this is when GDB stops running
the program, it just returns a command prompt and awaits your input,
instead of restarting the server.

This is the Bash script I'm using to start my DOD:S server right now:
#!/bin/bash
export LD_LIBRARY_PATH=.:bin:$LD_LIBRARY_PATH
dtach -n ./terminal.dod1 -r winch taskset 0x000C -- gdb -q -batch -x
./gdbinit \
--args ./srcds_i686 -debug \
-game dod \
-pidfile ../pid.dod1 \
-tickrate 33 \
+ip 1.2.3.4 \
+hostname Hostname \
+map dod_donner \
+maxplayers 26 \

dtach mimicks screen's detach feature and taskset relegates gdb and
srcds to processors 2 and 3 (I'm running two processors with HT).
Anyway, the good parts are gdb's switches. -q starts it in quiet
mode, so it doesn't print anything except the prompt when you start it.
-batch removes the prompt entirely and instead executes a series of
commands specified in the file chosen by the -x switch. In my gdbinit
file, I have the following:

set logging on
while 1
run
bt
end

The first makes gdb log all of its own output to gdb.txt in the
current working directory. run starts the program of course, and when
the program finishes running, it runs bt (short for backtrace). If
the server segfaults, this will print a backtrace of where it crashed.
Or more simply, it'll print the function in which the server crashed,
and the list of functions that were called to get to that point.

After the program quits, it restarts it again. This is definitely useful
for keeping the server up, but it can be annoying if you're trying to
forcibly quit the server. If that's the case, you should probably just
run quit once and then hit ^C two times to exit gdb.

Anyway, hopefully someone will find this information useful. I'm really
only running gdb on my production server at the moment because the
source server crashes without it due to some sort of incompatibility
with my kernel, but it's still useful for getting real crash information
 in real situations for reporting bugs.

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] STEAM id assigned to wrong player

2006-01-12 Thread Philip Lorenz

Yes we have had reports of this happening on a source server.

Regards,

Philip Lorenz

Alfred Reynolds wrote:


It anyone having this problem on a Source engine server?

- Alfred






___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] CS 1.6 AMX on RedHat AS 4

2005-07-08 Thread Philip Lorenz

Check what ldd amx_mm_i586.so tells you. I guess it's a missing library
(AMX requires the old libstdc++). If it is complaining about a missing
libstdc++.so.5 try installing the c++ compat packages.

Philip

Chuck Wow wrote:


--
[ Picked text/plain from multipart/alternative ]
I have a server that was running on RedHat ES 3.0 which I recently upgraded the 
OS to RedHat AS 4.0. Since the OS upgrade my AMX stopped worked and is giving a 
bad load. Any ideas?? I reinstalled AMX 0.99 but I am still getting the error.

Currently loaded plugins:
description stat pend file vers src load unlod
[ 1] amx_mm_i586.so badf load amx_mm_i586.so v - ini - -
[ 2] fun_mm_i586.so badf load fun_mm_i586.so v - ini - -
[ 3] VexdUM_mm_i586 badf load VexdUM_mm_i586.s v - ini - -
[ 4] Adminmod RUN - admin_MM_i386.so v2.50.58 ini Start Start
[ 5] wwclconfig RUN - wwclconfig_mm_i3 v2.00 ini Chlvl Chlvl
[ 6] STATSME RUN - sm_cstrike_mm_i3 v2.8.0.1 ini Chlvl Chlvl
6 plugins, 3 running

thanks!






___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] SourceTV documentation

2005-04-29 Thread Philip Lorenz
Regarding -tvmasteronly is it working at all (this is linux-wise).
Adding it to command line virtually does nothing at all. Running a
strings * | grep tvmasteronly did not reveal such a string in the
binaries. Is this command line argument not implemented into the Linux
version of the SRCDS yet?
Regards,
Philip Lorenz
Per Lambæk wrote:
Very nice, -tvmasteronly looks great.. But ehm... tv_relay is *still*
not working in the linux version, is this being worked on?
Regards
Per Lambæk - Nomad
www.HLTV.org
Alfred Reynolds wrote:


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] [srcds] deactivating sv_hltv

2005-01-08 Thread Philip Lorenz
Best would be something similar to the read-only variables which can be
founds in the DS of games such as CoD. Default of course would be 0 :)

Philip

On Sat, 2005-01-08 at 22:51 +, Steven Hartland wrote:
 I must agree there needs to be a way of disabling this feature from the
 command line so that it cannot be enabled via rcon.

 Steve / K
 - Original Message -



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Rcon Problem on Source server

2005-01-07 Thread Philip Lorenz
I have been able to replicate the issue of rcon failing to bind and it
is pretty much obvious. Use something like netcat to connect to the rcon
port and do not disconnect. At the same time reboot the source server.
You'll see that it won't be able to rebind RCON as the OS still lists
the connection in the TIME_WAIT state. I do not know whether you have
exactly fixed this bug so I posted here.

Regards,

Philip

On Tue, 2005-01-04 at 00:17 +, Richard Fennell wrote:
 Alfred Reynolds wrote:

 I have found a bug with the socket binding that could cause this, we
 should have a release later in the week or early next week that fixes
 this.
 
 - Alfred
 



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] server crashes

2004-12-19 Thread Philip Lorenz
Are they freezing or are they properly crashing? We've had problems
with servers crashing recently but it very much seems like that we have
to blame SAP or the source plugin interface (will have to look into this).
Regards,
Philip
Sebastian wrote:
I am running two CS Source servers with two different installs and they seem
to both crash after around 30 minutes to an hour after starting. nothing
shows up in the logs, as to why the crashes are occuring..enabled debug and
still unable to find out why.
can anyone shed some light?
Server is a Dual 2.4Ghz Xeon, 2GB ram running Fedora Core 3, 2.6.9
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Counter-Strike Source update

2004-12-17 Thread Philip Lorenz
For us it seems to randomly choose a tcp port in the 46xxx range. This
(rcon) port changes every time the server is rebooted.
Philip
PiTaGoRaS wrote:
It seems to be working fine on our CS:S and HL2DM servers . I suggest you to 
take a look at the binded TCP ports in your machine (netstat -tupan), maybe 
srcds is using other port than the expected.
--
PiTaGoRaS
GUN2 escribió (Fri, 17 Dec 2004 14:55:32 +0100):

the rcon does not work at all after the update.
i updated two boxes and the config files weren't altered.
no rcon connection is possible on both machines.
any tips?
___
To unsubscribe, edit your list preferences, or view the list
archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] RCON Problems with CS:S

2004-12-16 Thread Philip Lorenz
As I have previously mentioned already exit the server then. This at
least gives the reboot script a chance to kick in until the port is
available again.
Philip
Alfred Reynolds wrote:
SO_REUSEPORT isn't a valid sockopt and SO_REUSEADDR is already used.
- Alfred
Original Message
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steven
Hartland Sent: Thursday, December 16, 2004 9:00 AM To:
[EMAIL PROTECTED] Subject: Re: [hlds_linux] RCON
Problems with CS:S


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Regarding the RCON Problems

2004-12-07 Thread Philip Lorenz
I have looked around when those problems occur (i.e. connection
refused). Those mainly (if not always) happened after the server had
crashed on had been rebooted via rcon quit.
So after all there are two solutions:
1. On rcon quit the listening socket does not seem to be closed properly
- i.e. add a close() call to the socket
2. Refuse to start if port is already in use - a good addition as it
would keep the server in a restart-loop until the port if available again.
Hope this helps you tracking down the problem.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] CSS in a libc6 2.3 chroot on a libc6 2.2 sys?

2004-11-27 Thread Philip Lorenz
That is perfectly fine. Don't forget to mount the proc fs or copy of
cpuinfo.
Philip
ruwen wrote:
Hi!
It the following thing possible?
Create on a libc6 2.2 system a dir.
Then copy from a 2.3 system the necessary files in that dir,
chroot it and start CSS.
I never tried to chroot a Gameserver so i did not try this.
But maybe somebody with experience can try this.
with best regards
ruwen

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] AMD 64 or possibly glibc 2.3.2 issue with CS Source

2004-11-21 Thread Philip Lorenz
FYI this is a glibc issue. The fedora people have implemented changes
that will shutdown the executable if an invalid call to free is made.
http://thread.gmane.org/gmane.linux.gentoo.devel/22501
Please view that website on how to control this behaviour. I have
personally not tested this but downgraded glibc instead but it might be
worth a try (and yes same behaviour happened on a 32bit system).
So either:
- Valve fixes those nasty free calls to invalid memory locations (I
asked for this before)
- You downgrade
- You try to disable this behaviour by setting the environment variable to 0
Philip
Andrew Forsberg wrote:
Hi Mike,
Unlike hlds, srcds's debug log appears to be next to useless -- it gives
me a record of what I'd just typed into console, dumps a core, and tells
me it aborted.
Running the ./srcds_amd binary directly was more useful. That helped me
track down a few obvious problems (which didn't occur at all on FC2
i386). After changing LD_LIBRARY_PATH to look in srcds/bin and
srcds/cstrike/bin, and updating the PATH to look in cstrike for the
chatterbox stuff, it stopped returning any errors except the original.
e.g.:
Console initialized.
Attempted to create unknown entity type event_queue_saveload_proxy!
Game .dll loaded for Counter-Strike: Source
*** glibc detected *** free(): invalid pointer: 0xf7fc9460 ***
./srcds_run: line 342:  2370 Aborted (core dumped)
$HL_CMD
etc...


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] banned.cfg not working

2004-11-06 Thread Philip Lorenz
Are you execing banned.cfg at server boot up time?
Philip
[EMAIL PROTECTED] wrote:
banned.cfg not working,
when i put entries in my banned.cfg as follows:
banid 0.0 STEAM_0:1:123123
i can still connect to the server.  I have restarted it, and still, that
has no effect.
What is the syntax for the banid for 1.6 hlds?
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] *** glibc detected *** free(): invalid pointer: 0xb7eaed00 ***

2004-10-24 Thread Philip Lorenz
Can anyone at Valve please fix those free() problems at the launch of
the srcds as the newer glibc builds just crash if a free call is made to
an invalid location.
Regards,
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Another possible rcon exploit?

2004-10-19 Thread Philip Lorenz
Alfred Reynolds wrote:
Can you send me the actual error string you see on the client when you
have these RCON problems ( Connection failed (No ...) isn't something
the engine would print). Or is this an external tool producing the
error?
A fix for a few of the active exploits is due out in the next couple of
days.


We have this happening a lot as well. Basically it seems like the TCP
socket just closes and any connections to it are refused (seems like the
listeners simply stops).
If you need any further debugging info let me know.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] I wouldnt have believed it, but it's true....

2004-10-17 Thread Philip Lorenz
Owen T. Soroke wrote:
LOL, it works


Also known as a format string vulnerability.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Deliberate Server Attacks - Exploit

2004-10-17 Thread Philip Lorenz
Martin wrote:
It seems if a player changes his name to %n, and is then killed they can
cause the server to crash, or atleast timeout and cause everyone to exit.
I'm seeing this several times a day and an urgent fix is required.
Example below:
L 10/16/2004 - 15:12:02: metti-405STEAM_0:0:4079CT changed name to
[myg0t]servercrash+
L 10/16/2004 - 15:12:09: [myg0t]servercrash+405STEAM_0:0:4079CT say
dont kill me
L 10/16/2004 - 15:12:14: [myg0t]servercrash+405STEAM_0:0:4079CT say
the server will crash
L 10/16/2004 - 15:12:38: [myg0t]servercrash+405STEAM_0:0:4079CT
changed name to %n
L 10/16/2004 - 15:12:49: %n405STEAM_0:0:4079CT say servercrash in
10 seconds
L 10/16/2004 - 15:12:57: %n405STEAM_0:0:4079CT say 3
L 10/16/2004 - 15:12:59: %n405STEAM_0:0:4079CT say 2
L 10/16/2004 - 15:13:02: %n405STEAM_0:0:4079CT committed suicide
with world
Another example with the '%n', after just crashing it.
L 10/17/2004 - 11:42:35: %n615STEAM_0:0:4586436CT say ILL DO IT
AGAIN WHEN IT GETS PACKED

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

I have been trying to verify this but this seems to affect client side only.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] I wouldnt have believed it, but it's true....

2004-10-17 Thread Philip Lorenz
Thomas Williamson wrote:
Hi ..
Wasnt there a MetaMod-Plugin, which checks the names in real-time with its
blacklist while they are trying to connect to the server?
Sorry that I can't remember the name of the plug-in, but I remember that
there was something. Maybe we can use something like that.
Will search for it, maybe I will find it again.

How would you do this if there is no such thing as metamod on the source
engine yet. Secondly blocking via LD_PRELOAD will be hard as we neither
know the exact function nor do we know the parameters it uses.
Best thing to do is to wait for Valve to release an update.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Re: Web based server administration

2004-10-13 Thread Philip Lorenz
Steven Hartland wrote:
Pretty reasonable IMO. I developed our web control and I know how
much time and effort goes into it.
If you think its such a rip develop your own :P
   Steve / K
If at least it would not be a combination of 2 or 3 different services...
I personally do not like having private keys lying around on my web
server which allow access to any of my boxes.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] Source DS requests

2004-09-22 Thread Philip Lorenz
I just got 2 requests - 1 of them can be considered relatively tiny.
Would it be possible to use relative paths when using dlopen() to load
the dynamic libraries rather than just exiting (i.e. by prefixing ./ to
the dlopen filename)? Would make certain things a whole thing a lot easier.
Secondly is it possible to bring back the old status command output. In
my opinion it's a lot easier to read (especially when a lot of users are
connected) and it's also easier to be parsed if reading from stdout.
Regards,
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Source DS requests

2004-09-22 Thread Philip Lorenz
My main concern is the readability of the output. First of all I don't
really feel like scrolling for ages when I type status and also does it
take longer to read 4-5 lines per user rather than 1 per client.
Philip
Morten Aare wrote:
Yep, I must agree on the status thing, if for a different reason also. I
did my own realtime stats and admin server frontend for hlds. It works
by parsing the log output realtime using the logaddress and a java
server application and it uses rcon status to keep track of the users on
the server (well, actually it just uses it to correct for the fact that
packets containing connects/disconnects might be lost and also it seems
that hlds sometimes forgets to write some disconnect events in the log -
is this a bug other people have noticed or am I just not parsing the log
well enough?). I haven't been able to get srcds running on my Debian
stable servers so I haven't tested it, but I have heard rumors (on this
list as far as I remember) that the new rcon status command doesn't
include the user SteamID. This seems very impractical for many different
reasons. In my own case it's annoying because my whole system is based
on a unique player ID derived from the SteamID. In this way I can avoid
people cheating on their stats by just changing their name etc.
So please, please dont change the rcon status output info without good
reason to do so. I can understand why you might want to restrict normal
user access to SteamIDs (as earlier with IPs) but server admins can
always find this information in the logs anyway, right? The layout is
not really a big concern as I have no problem with adapting my parser to
a different format if necessary, but the info should not be limited in
the rcon status.
I am a big fan of the old saying Don't fix it if it ain't broke - and
I dont see anything broken here. If you have good reason to change it
there really isn't a lot for us to do about it, but please tell us why.
I'm not trying flame you guys at valve, as I think you do a good job
trying to improve everyone's experience with hlds/srcds - especially on
this mailing list. Hope you will note my input and take it as
constructive feedback in stead of just ranting...
Regards,
Morten Aare
[EMAIL PROTECTED]

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Referer for sv_downloadurl

2004-09-21 Thread Philip Lorenz
Paul Wiegmans wrote:
Maybe its possible to redirect the MOTD file tot the map-server, then
log the users IP , then check mapdownload against the IP of the people
how viewed the MOTD.  As the MOTD gets downloaded before the map. this
would be an good check of when the user are referred from your
gameserver.

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
This clearly won't work (how will the user view the motd if he has to
download the map first...). The best implementation is a metamod plugin
which sends a request to a http server requesting that the IP address of
the client will be added to the db on first time connect. Then
sv_downloadurl can be pointed to a php file which will evaluate the ip
against the DB and either send the file or return a 403 if download is
forbidden.
The httpd shouldn't listen on port 80 as many isps automatically reroute
http requests through their own proxy server and therefore changing the IP.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


[hlds_linux] GLIBC 2.3 Binaries

2004-08-24 Thread Philip Lorenz
I was wondering whether it was possible to get my hands on Glibc 2.3
only binaries of the current (old) hlds compiled with a newer version of
gcc.
The reason I'm asking for this is because many people have reported such
a performance boost using glibc 2.2 (i.e. woody) over glibc 2.3.
Would be great if this was possible.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] CS:S-dedicated help!

2004-08-13 Thread Philip Lorenz
Steven Hartland wrote:
Read the mail list archives and you will find the answer.
Basically u need to upgrade your OS unless Valve do
a compile compatible with older versions :(
   Steve / K
It's time for ya to upgrade anyways ;p. Debian Woody is kinda out of
date anyways and Sarge is about to be released (as stable) soon. For all
you FreeBSD users, it's a linux port so please don't b*tch about that it
doesn't work for you. The only reason the old HLDS worked was becaused
it was built for older glibcs (ok if this is wrong correct me (i havent
tried cs:s on a freebsd machine yet)). I think it's about time that all
GSPs update to the newer glibc 2.3 which has been around for a while.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] CS:S-dedicated help!

2004-08-13 Thread Philip Lorenz
Peter Kirby wrote:
There is a 'hack' you can do which worked fine for me on the dedicated
box I run which is still on glib 2.2.x
Simply I downloaded the gentoo stage3 tarball.. Untarred into a folder
(/root/gentoo for me).  Made a folder /root/gentoo/home/steam and
copied the contents of my existing steam folder over. did a mount -t
proc none /root/gentoo/proc then chrooted in.. env-update and a source
/etc/profile to get my gentoo environment.. Then I emerged vim (cause
I like vim) created the steam user in the chroot environment, changed
ownership of the steam folder and it's contents.. su - steam and run
srcds_run happy as can be :).
Overkill mainly.. But when you're done the whole lot can just be
removed with no harm done.. So it a good temp workaround if you don't
want to re-install just yet. (dedicated box - no I don't want to just
yet ;))
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

The biggest problem you might have would be security issues. Those are
pretty small in your case anyways. I'll go as far as comparing glibc 2.2
to Win 9x. Many people have moved ahead and even RH 8 is using glibc 2.3
after running up2date. We are running Gentoo without any issues for any
games. I just personally think it's time to go ahead and update the
systems and not pester companies such as Valve by forcing them to
statically compiling binaries because some people are still running
Debian Woody/FreeBSD. I followed many threads about a FreeBSD and if
Valve really wants to they can release a FreeBSD version. There is no
point in whining that it doesn't work on FreeBSD if it is a linux based
server. It is more up to the FreeBSD maintainers to create a linux
compatibility layer based around glibc 2.3.
Philip
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] [AMX] AMX 0.9.9 has been released

2004-08-02 Thread Philip Lorenz
m0gely wrote:
AMX Mod, one of the most widely used Half-Life server addons, has
released a new version.
I'm wondering when they'll release the source. I personally prefer the
amxmodx fork of this project as its developers are putting a lot of
effort in informing the masses on what is going on and syncing their
work with the cvs regularly.
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] OT - server dual mp2200

2003-07-21 Thread Philip Lorenz
[EMAIL PROTECTED] wrote:
This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
I just built this and I am not going to need it - im not going to post price because I 
dont want to tick people off too bad. Lol
Anyways. If anyone is in the market for a dual mp2200 with 1 gig kingston etc email me 
back at [EMAIL PROTECTED] for the price and complete specs. Im not going to be using 
it so I may as well let it go. Dont email me offering me $400 lol - someone actually 
did that on a board I posted on.
--
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

I'll pay $300 :p

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Wierd crashing

2003-07-07 Thread Philip Lorenz
Think so. Just started receiving mails again 30 min ago :\

[TD]MoD wrote:
I sent a reply for this mail a day ago, is list down or something?

--

MoD,

Worried :|

- Original Message -
From: Omer Cohen [EMAIL PROTECTED]
Newsgroups: mirror.valve.hlds_linux
To: [EMAIL PROTECTED]
Sent: Saturday, July 05, 2003 5:18 PM
Subject: [hlds_linux] Wierd crashing


I had a server running for like two months
I stopped it to change some settings on the server cfg file
and now it wont run:
$ ./hlds_run -game cstrike -debug
Enabling debug mode
Auto-restarting the server on crash
Host_Init
Added packfile /home/icc/hlds_l/valve/pak0.pak (985 files)
Protocol version 46
Exe version 3.1.1.0
Exe build: 14:46:34 Jun 11 2002 (2056)
WON Auth Server
Server IP address 192.117.122.116:27015
Host_Error: Couldn't get DLL API from et!
FATAL ERROR (shutting down): Host_Error: Couldn't get DLL API from et!
I only get it with -game cstrike
I reinstalled cstrike and still getting this error
wtf ? :o
--

Regards,
Omer Thermo Cohen



___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Linux steam release

2003-06-27 Thread Philip Lorenz
Stefan Huszics wrote:

Philip Lorenz wrote:

first of all there is no autoexec.bat in linux ... *sigh* (go
back to windows)


#1 There is no autoexec.bat by default in Linux hlds, but what is
stopping you from creating one? And if you have one it will autoexecute
just as on Windows. If you are going to make a snotty remark, at least
make sure you know what you are talking about...
#2 If you are not able to properly trim your quotings, consider
top-posting instead.
--
/Stefan
Software never has bugs. It just develops random features. =)



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

There might be a autoexec.cfg for the linux hlds but surely not a .bat -
Linux uses .sh as a batch ending if it uses one at all (and as
tried it wouldn't execute a so called autoexec.bat in the root/cstrike
folder at all).
#2 I am just waiting for you to claim there is a start button in KDE
with the windows logo.
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Server number

2003-06-26 Thread Philip Lorenz
James Clark wrote:
When you connect to a CS server with the client you get greeted with
the server number, is there a way to rcon this number from the server?
--
James.
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

send status then it'll tell you the build which is the server number
version :  46/3.1.1.0 2056 insecure
for example :)
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] VAC updates

2003-06-23 Thread Philip Lorenz
lastshooter wrote:
heh, speaking from the TFC community, I can tell if VAC updates are working.
The h4x0rs start showing up playing TFC : /
Just my observations.
--
Michael Lindsey
lastshooter
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

If i understood you right i just think i should tell you VAC isn't
implemented into TFC yet.
___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] Re: Speakeasy DSL, Linux, Servers and Free XBOX or PS2

2002-09-27 Thread Philip Lorenz

Hehe :)
If you run the WON-Servers would you be able to send me some source codes
of them ;)
At 17:12 27/09/2002, you wrote:
Edward Bender writes:
I'm really not trying to spam here

But you are.

-Mad

--
Madness is soil in which creativity grows

  - Chris Bielek
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] Current Security Modules and HLGuard

2002-09-20 Thread Philip Lorenz

Meant on (sorry) :)
At 17:54 20/09/2002, you wrote:
No :)

It is not in yet.
At 15:57 20/09/2002, you wrote:
Shoud i turn the wallhack detection of HLGuard on or off with the up to date
sm?


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] [OT] This is NOT the HLG support maillist, please respect that.

2002-08-25 Thread Philip Lorenz

Me climbs back in my pram and starts crying :p
At 01:22 26/08/2002, you wrote:
Why don't you just climb back in your pram and stop crying? This IS the
place for admins to chat about problems they encounter. I am getting fed up
with people complaining about what matters can or cannot be discussed here -
it is a matter about adminning - if we can't get help in matters like this
then this list serve is dead and useless. If I am able to pass on what
limited knowledge I have to end of helping someone, then I will do so.

But hey, going by what you're saying about this NOT being the place to
discuss matters to do with HLGuard, isn't it equally correct to state that
this is NOT the place for you to voice your frustrations about people
chatting about it? But I would never presume to do something like that
myself - I appreciate the help I get on all matters that this adminning
listserve deals with.

Here endeth my rant for the year - apologies to those that disagree with my
view.

Jay.

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] RE: [hlds] New Security Modules -Wednesday

2002-08-21 Thread Philip Lorenz

you could disconnect ur server from the internet then u r 200% sure.
still not proofed that it wont send that data once you unblock it again 

if i had shitloads of money i would try-out cheats but now ... :)
At 02:01 22/08/2002 +0200, you wrote:
it's a matter of logic, the server can't send the info to ban servers. You
can also use ipchains panic mode to be 100% sure :)

- Original Message -
From: Philip Lorenz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, August 22, 2002 1:43 AM
Subject: Re: [hlds_linux] RE: [hlds] New Security Modules -Wednesday


  you wanna go and try it out for us ;)
  At 01:43 22/08/2002 +0200, you wrote:
  blocking the port 27011 UDP in your firewall should be enought to avoid
  being banned, I think...
  


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] live stats

2002-08-18 Thread Philip Lorenz

They always did. Well I am not sure whether they did allow javascript :P ?
At 07:43 18/08/2002 -0700, you wrote:
On Sun, 18 Aug 2002, Stefan Huszics wrote:

  Brian A. Stumm wrote:
 
  No autorefresher but I could easily incorporate one if that is what you
  wanted. Right now you have to go back to main servers page then click
  player details again. Like I said though, twould be easy to implement with
  javascript.
  
  No need for Javascript :)
  Just add this to the head of the page
 
  meta http-equiv=Refresh content=120;URL=thewebpage.html
 
  120 = updated every 2 minutes
 

Well I was aware of that but do all browsers now recognize that? In the
past they didn't. Guess I haven't been keeping up. :(

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News


___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] [OT] Why no Linux Client Support? (was Valves Anti Cheat)

2002-06-04 Thread Philip Lorenz

--
[ Picked text/plain from multipart/alternative ]
Get the WineX developed by the guys Erik sent you. VAC doesn't look for
files. It checks the memory. What you guys think of looking what has been
sent than always asking the same questions over and over again...
http://www.transgaming.com/showthread.php?news=35

That's the link of the Wine you need (or at least how you need to configure it)
At 15:58 04/06/2002 +0100, you wrote:
does anyone actually know what code 0 is.

Does anyone know what files the anti cheat scans, so i can put them in
the right place.

?
I need to play cs again



___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News
--

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux



Re: [hlds_linux] [OT] adminmod plugin

2002-06-04 Thread Philip Lorenz

You need to add a line pointing to the plugin in: cstrike/plugin.ini (for
counter-strike).
For example add:
dlls/plugin_base.amx

to add plugin_base.amx

once  you have done that you should reload your admin mod and then start
browsing for info about this plugin using admin_help
At 16:13 04/06/2002 +0100, you wrote:
Hi folks - before anyone asks, yes - I have tried the adminmod forums (and
also a chatroom), but have had no success, so forgive me for asking here...

I have downloaded a plugin that announces the arrival of admins on a server,
converted it to an amx file and placed it in the dlls dir within the csrtike
dir. The server has been restarted but so far it does not seem to announce
my (or a friends arrival) joining the server. It didn't really explain what
else needs to be done (if anything does), but I'm wondering if anything else
needs to be done, like perhaps editing some config or such.

If anyone can help, please do!

jay.

(email - for off topic replies: [EMAIL PROTECTED])

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Visit http://cs.fuctnetwork.com for Up-To-Date Half-Life News

___
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux