The referrer is ALWAYS the server. To pull a snippet from the thread I posted
which you neglected to read before replying.
SetEnvIfNoCase Referer hl2://xx\.xx\.xx\.xx allow_download
Order Deny,Allow
Allow from env=allow_download
Deny from all
Yes, the clients all come from their random IP ranges, the referrer is always
your server. So you setup an if statement to catch the trouble makers.
----- Original Message -----
From: Tom Mombourquette
To: [email protected]
Sent: Monday, September 03, 2012 3:41 PM
Subject: Re: [Csgo_servers] Mirroring downloadurl in console
How are you going to limit it by IP address anyways? It's not the servers
address that's requesting the files, it's the clients!
From: [email protected]
[mailto:[email protected]] On Behalf Of Absurd Minds
Sent: September-03-12 4:36 PM
To: [email protected]
Subject: Re: [Csgo_servers] Mirroring downloadurl in console
It's an extra level of privacy that I was requesting. I know that there are
workarounds. I'm asking valve to simply provide that privacy from their end
On Sep 3, 2012 3:34 PM, "Asher Baker" <[email protected]> wrote:
What would be the point? it would be trivial to see the HTTP requests
with a network sniffer.
The correct solution is to limit this on your web server, the game
client passes the server's IP and port as part of the request headers.
On Mon, Sep 3, 2012 at 8:30 PM, Absurd Minds <[email protected]> wrote:
> Yep I sure could go through all that trouble to find a workaround. But I was
> hoping that by suggesting it to valve they would realize that mirroring the
> IP isn't a great idea and would be willing to re-hide it
>
> On Sep 3, 2012 3:29 PM, "Devin O'Malley" <[email protected]> wrote:
>>
>> Oh, okay, I understand what you mean now.
>>
>> Couldn't you just firewall the box with the maps on it? Then you can
>> whitelist your server, which should be handling the requests. I do believe
>> that is what we do, I don't handle that end of it.
>>
>> On Mon, Sep 3, 2012 at 4:26 PM, Absurd Minds <[email protected]>
>> wrote:
>>>
>>> It mirrors it in console when you connect to a server. It specifically
>>> says 'downloading URL.map.nap' out whatever.
>>>
>>> On Sep 3, 2012 3:24 PM, "Devin O'Malley" <[email protected]> wrote:
>>>>
>>>> Unless someone has rcon, they can't retrieve most server convars'
>>>> values. If they try to do it in their console, they will only get their
own
>>>> replicated values. For instance on my TF2 servers, if I type in sv_lan
on a
>>>> server, it tells me 1. In order for me to connect to a server, sv_lan
has to
>>>> be 0, so it is telling me what my local set up is, not what the server's
>>>> value is.
>>>>
>>>> At least, I assume that is how CSGO is.
>>>>
>>>> On Mon, Sep 3, 2012 at 4:21 PM, Absurd Minds <[email protected]>
>>>> wrote:
>>>>>
>>>>> Is there a way to keep the downloadurl private so that other people
>>>>> can't just put that URL into their server config ?
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Csgo_servers mailing list
>>>>> [email protected]
>>>>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Csgo_servers mailing list
>>>> [email protected]
>>>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>>
>>>
>>> _______________________________________________
>>> Csgo_servers mailing list
>>> [email protected]
>>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>>
>>
>>
>> _______________________________________________
>> Csgo_servers mailing list
>> [email protected]
>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
>
>
> _______________________________________________
> Csgo_servers mailing list
> [email protected]
> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
------------------------------------------------------------------------------
_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers_______________________________________________
Csgo_servers mailing list
[email protected]
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
