Re: [hlds_linux] Arbitrary source file upload (HURRY UP VALVE)

2009-08-20 Thread w4rezz
No sorry, they are doing Left4Dead 2. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux

[hlds_linux] Fragments memory corruption in the Source Engine (exploit; arbitary memory access)

2009-08-20 Thread Saul Rennison
Luigi has found yet another exploit in Valve's up-to-date, unexploitable engine :D http://aluigi.altervista.org/adv/sourcefraghof-adv.txt Thanks, - Saul. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http:/

Re: [hlds_linux] Arbitrary source file upload (HURRY UP VALVE)

2009-08-20 Thread kevin-b...@starmen.net
This should be near the top of the priority list. I mean, this is really bad. Anyone can randomly trash or exploit through arbitrary uploads any file the srcds has access to, including files outside of the source server directories if there's any access. This is aside from the numerous current c

Re: [hlds_linux] Rcon protect question

2009-08-20 Thread Nicolas Fernandez
It's a good idea, but as disabled access and is only for amxmodx?. Thanks On Thu, Aug 20, 2009 at 4:24 AM, Steffen Tronstad wrote: > You could just disable rcon allover, and just give your admins rights via > amxmod or similar. > > That would be the easiest, safest way to go. > > > -Opprinne

Re: [hlds_linux] Intermittent lag spikes since classless update?

2009-08-20 Thread Ronny Schedel
The gcf are normally very big, I don't think such large files are cached. > > >> -Original Message- >> From: hlds_linux-boun...@list.valvesoftware.com >> [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf >> Of Ronny Schedel >> Sent: 19 August 2009 20:53 >> To: Half-Life dedica

Re: [hlds_linux] L4D forks keep crashing

2009-08-20 Thread David A. Parker
One more interesting thing is that even when you kill a fork with "quit" or "_restart" it still shows up in the netcon master console: $ telnet 0 9000 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. PASS x status #status child 0 pid : 0 map : l4d_farm01_hilltop numplayers :

Re: [hlds_linux] Intermittent lag spikes since classless update?

2009-08-20 Thread gameadmin
> -Original Message- > From: hlds_linux-boun...@list.valvesoftware.com > [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf > Of Ronny Schedel > Sent: 19 August 2009 20:53 > To: Half-Life dedicated Linux server mailing list > Subject: Re: [hlds_linux] Intermittent lag spikes

Re: [hlds_linux] L4D forks keep crashing

2009-08-20 Thread David A. Parker
Same things happens with _restart: _restart L 08/20/2009 - 10:31:42: Preventing spawning L 08/20/2009 - 10:31:42: server_message: "quit" L 08/20/2009 - 10:31:42: Log file closed L 08/20/2009 - 10:31:42: server_message: "restart" And then the fork never comes back. This is the same behavior as "

Re: [hlds_linux] L4D forks keep crashing

2009-08-20 Thread w4rezz
quit to force auto-restart? what happened with "_restart" command ? 2009/8/20 David A. Parker : > I remember the same symptoms happening when "quit" was used as well, and > I think that is something Valve needs to fix (forks should auto-restart > like any other instance of srcds, but they don't).

Re: [hlds_linux] L4D forks keep crashing

2009-08-20 Thread David A. Parker
I remember the same symptoms happening when "quit" was used as well, and I think that is something Valve needs to fix (forks should auto-restart like any other instance of srcds, but they don't). However, server forks are apparently dying on their own since the July 31 update. And, as Ronny p

Re: [hlds_linux] L4D forks keep crashing

2009-08-20 Thread gameadmin
I haven't checked recently, as we're reorganising our servers at the moment, but I certainly used to be able to trigger this simply by issuing an rcon "quit" command to a child server. Confused the hell out of me the first time I say it, as this certainly _used_ to work > -Original Message--

Re: [hlds_linux] Rcon protect question

2009-08-20 Thread Ronny Schedel
I don't know if this is already fixed, but in the past it was possible to brute force the server without getting banned. The trick was to change the client port on each connect. This was recognized as a different attempt, even with the same IP address. > That should be enough; rcon bans you fo

Re: [hlds_linux] Intermittent lag spikes since classless update?

2009-08-20 Thread Ronny Schedel
Disable the game overlay in the Steam settings, restart Steam and look if it solve your lag problems. > hmm, well sometimes it happens to a few people at the same, time, > sometimes > to others and not me. > > On Wed, Aug 19, 2009 at 1:53 PM, Ronny Schedel > wrote: > >> Besides this, I can se

Re: [hlds_linux] Rcon protect question

2009-08-20 Thread Andrew Armstrong
That should be enough; rcon bans you for a while after repeated failures, so brute force attacks are impractical. Most likely someone is getting the password via another means (you're putting it somewhere else where they can see it, you tell someone else who gives it out, etc). - Andrew -Ori

Re: [hlds_linux] Rcon protect question

2009-08-20 Thread Steffen Tronstad
You could just disable rcon allover, and just give your admins rights via amxmod or similar. That would be the easiest, safest way to go. -Opprinnelig melding- Fra: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] På vegne av Nicolas Fernande

[hlds_linux] Rcon protect question

2009-08-20 Thread Nicolas Fernandez
Hello ppl, Need to know if there is any protection for servers rcon, i use sv_rcon_maxfailures , sv_rcon_banpenalty etc. But someone is discovering the rcon password, if not via some exploit. Thanks! ___ To unsubscribe, edit your list preferences, or vi

Re: [hlds_linux] Intermittent lag spikes since classless update?

2009-08-20 Thread Ronny Schedel
The sound cache is full on a full server after some seconds. It seems to be limited to 67 MB only. I have increased mem_min_heapsize, mem_max_heapsize and snd_async_minsize, but the 67 MB limit is still there... So there must be some other way to increase it. - Original Message - From