Re: [hlds] Quick question about sv_search_key
The search key does not work currently. Whatever you set, it never show up in sv_showtags. It's broken. - Original Message - From: Aaron Rapp r...@iz3d.com To: 'Half-Life dedicated Win32 server mailing list' hlds@list.valvesoftware.com Sent: Saturday, May 02, 2009 11:25 PM Subject: Re: [hlds] Quick question about sv_search_key I've been working all morning on trying to rectify our server's Search Key problem. I've followed everyone's advice in fixing the search key problem, but it hasn't been fixed. This is what I've tried so far: - sv_search_key x and sv_steamgroup x in the server.cfg - just sv_search_key without steamgroup - just sv_steamgroup without search key - sv_search_key without using quotation marks - tried the 1013,key:x and that hasn't worked either In the game, I've tried using the lobby matchmaking sv_search_key with and without quotation marks. I seriously can't get anything to work. I run 5 open servers and 1 private servers, and the lobby won't find any of them. It'll just sit and search forever and never stop. If anyone can shed some light, I'd be grateful. Thanks, Aaron Rapp -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Robert Whelan Sent: Tuesday, April 28, 2009 6:32 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Quick question about sv_search_key They still havn't adressed alltalk, you'd think it would be a priority or at least get a nod Mar 22 14:44:30 PDT 2009 [hlds] l4d sv_alltalk convar From: Jonah Hirsch crazydog...@gmail.com To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com Sent: Tuesday, April 28, 2009 12:08:40 AM Subject: Re: [hlds] Quick question about sv_search_key That was it. I installed a snapshot of SourceMod 1.2.1 without the Sourcemod tag, and I removed sv_alltalk 0 from my server.cfg, and that made enough room for this: empty,grp:##i,key:1013,key:keey1013,coop,versus,survival Roman S wrote: It's the issue with server tag string. When you specify both steamgroup and search key, it may become too long (longer than 63 symbols) so some tags get truncated - either steamgroup or key one. They have promised to fix it in SDK update by enabling more data to be sent to master servers (read the Survival DLC patch notes here). To view a list of tags, assigned to a running server, use sv_showtags - it only shows the working ones, so you may find the missing. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
It works fine for me though. I have the exact thing set on my server's server.cfg: *sv_search_key 1013,key:KEYHERE* And in my client's autoexec.cfg: *sv_search_key KEYHERE* And I gets tons of random people and I can connect fine using just the search key. It's full 90% of the time; I usually have to kick people off so I can get on. What do you get when you run sv_showtags? My server shows: Tags: Public : empty,key:KEYHERE1013,coop,versus,survival Private: empty,key:1013,key:KEYHERE1013,coop,versus,survival -Mike On Sun, May 3, 2009 at 4:08 AM, Jonah Hirsch crazydog...@gmail.com wrote: Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
That works fine for me too, except for getting random people. It might be an issue with the server since I removed the searchkey and the steamgroup (just to be safe. It's not exclusive), and left it that way for a few hours, and nobody connected... This is probably a question for a different conversation, but what could cause that? I can see the server fine through the server browser (in favorites), and myself and everyone I play with are able to connect to it just fine. Could something in sourcemod be doing this? On Sun, May 3, 2009 at 2:57 AM, Mike Zimmermann rem...@remmiz.com wrote: It works fine for me though. I have the exact thing set on my server's server.cfg: *sv_search_key 1013,key:KEYHERE* And in my client's autoexec.cfg: *sv_search_key KEYHERE* And I gets tons of random people and I can connect fine using just the search key. It's full 90% of the time; I usually have to kick people off so I can get on. What do you get when you run sv_showtags? My server shows: Tags: Public : empty,key:KEYHERE1013,coop,versus,survival Private: empty,key:1013,key:KEYHERE1013,coop,versus,survival -Mike On Sun, May 3, 2009 at 4:08 AM, Jonah Hirsch crazydog...@gmail.com wrote: Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Jonah Hirsch --- Sent from my Blackberry ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
I use sv_search_key yourkeyhere (with quotes) in the sever.cfg. I do not use sv_steamgroup. Then on my end(client side) I have a autoexec.cfg in C:\Program Files\Steam\steamapps\common\left 4 dead\left4dead\cfg folder with sv_search_key yourkeyhere (with quotes). Not sure if this matters or not but I also have sv_allow_lobby_connect_only 0 in the server.cfg. When I start a game from the lobby it finds my server and connects with in a few seconds. IMHO it finds and connects to the server faster after the latest patch. I hope that helps. From: crazydog...@gmail.com Date: Sun, 3 May 2009 04:52:03 -0700 To: hlds@list.valvesoftware.com Subject: Re: [hlds] Quick question about sv_search_key That works fine for me too, except for getting random people. It might be an issue with the server since I removed the searchkey and the steamgroup (just to be safe. It's not exclusive), and left it that way for a few hours, and nobody connected... This is probably a question for a different conversation, but what could cause that? I can see the server fine through the server browser (in favorites), and myself and everyone I play with are able to connect to it just fine. Could something in sourcemod be doing this? On Sun, May 3, 2009 at 2:57 AM, Mike Zimmermann rem...@remmiz.com wrote: It works fine for me though. I have the exact thing set on my server's server.cfg: *sv_search_key 1013,key:KEYHERE* And in my client's autoexec.cfg: *sv_search_key KEYHERE* And I gets tons of random people and I can connect fine using just the search key. It's full 90% of the time; I usually have to kick people off so I can get on. What do you get when you run sv_showtags? My server shows: Tags: Public : empty,key:KEYHERE1013,coop,versus,survival Private: empty,key:1013,key:KEYHERE1013,coop,versus,survival -Mike On Sun, May 3, 2009 at 4:08 AM, Jonah Hirsch crazydog...@gmail.com wrote: Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Jonah Hirsch --- Sent from my Blackberry ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _ Windows Live™: Keep your life in sync. http://windowslive.com/explore?ocid=TXT_TAGLM_BR_life_in_synch_052009 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
OkI'm not getting anything new, but I think I need to understand a bit more the use of each of these cvars. With just sv_steamgroupthat should automatically put a member of that steamgroup into one of our servers, correct? Or no? With sv_search_key...that is just another way of doing it? Either one, should put a member of our steam group, or someone putting in our search key, into one of our servers, if it's open. Aaron Rapp -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of chris bernard Sent: Sunday, May 03, 2009 5:55 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] Quick question about sv_search_key I use sv_search_key yourkeyhere (with quotes) in the sever.cfg. I do not use sv_steamgroup. Then on my end(client side) I have a autoexec.cfg in C:\Program Files\Steam\steamapps\common\left 4 dead\left4dead\cfg folder with sv_search_key yourkeyhere (with quotes). Not sure if this matters or not but I also have sv_allow_lobby_connect_only 0 in the server.cfg. When I start a game from the lobby it finds my server and connects with in a few seconds. IMHO it finds and connects to the server faster after the latest patch. I hope that helps. From: crazydog...@gmail.com Date: Sun, 3 May 2009 04:52:03 -0700 To: hlds@list.valvesoftware.com Subject: Re: [hlds] Quick question about sv_search_key That works fine for me too, except for getting random people. It might be an issue with the server since I removed the searchkey and the steamgroup (just to be safe. It's not exclusive), and left it that way for a few hours, and nobody connected... This is probably a question for a different conversation, but what could cause that? I can see the server fine through the server browser (in favorites), and myself and everyone I play with are able to connect to it just fine. Could something in sourcemod be doing this? On Sun, May 3, 2009 at 2:57 AM, Mike Zimmermann rem...@remmiz.com wrote: It works fine for me though. I have the exact thing set on my server's server.cfg: *sv_search_key 1013,key:KEYHERE* And in my client's autoexec.cfg: *sv_search_key KEYHERE* And I gets tons of random people and I can connect fine using just the search key. It's full 90% of the time; I usually have to kick people off so I can get on. What do you get when you run sv_showtags? My server shows: Tags: Public : empty,key:KEYHERE1013,coop,versus,survival Private: empty,key:1013,key:KEYHERE1013,coop,versus,survival -Mike On Sun, May 3, 2009 at 4:08 AM, Jonah Hirsch crazydog...@gmail.com wrote: Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Jonah Hirsch --- Sent from my Blackberry ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _ Windows LiveT: Keep your life in sync. http://windowslive.com/explore?ocid=TXT_TAGLM_BR_life_in_synch_052009 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Quick question about sv_search_key
sv_steamgroup just makes the server show up in the list on the main menu of all members and had no effect on lobbies. sv_search_key filters lobby server searches to servers with matching keys. Aaron Rapp wrote: OkI'm not getting anything new, but I think I need to understand a bit more the use of each of these cvars. With just sv_steamgroupthat should automatically put a member of that steamgroup into one of our servers, correct? Or no? With sv_search_key...that is just another way of doing it? Either one, should put a member of our steam group, or someone putting in our search key, into one of our servers, if it's open. Aaron Rapp -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of chris bernard Sent: Sunday, May 03, 2009 5:55 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] Quick question about sv_search_key I use sv_search_key yourkeyhere (with quotes) in the sever.cfg. I do not use sv_steamgroup. Then on my end(client side) I have a autoexec.cfg in C:\Program Files\Steam\steamapps\common\left 4 dead\left4dead\cfg folder with sv_search_key yourkeyhere (with quotes). Not sure if this matters or not but I also have sv_allow_lobby_connect_only 0 in the server.cfg. When I start a game from the lobby it finds my server and connects with in a few seconds. IMHO it finds and connects to the server faster after the latest patch. I hope that helps. From: crazydog...@gmail.com Date: Sun, 3 May 2009 04:52:03 -0700 To: hlds@list.valvesoftware.com Subject: Re: [hlds] Quick question about sv_search_key That works fine for me too, except for getting random people. It might be an issue with the server since I removed the searchkey and the steamgroup (just to be safe. It's not exclusive), and left it that way for a few hours, and nobody connected... This is probably a question for a different conversation, but what could cause that? I can see the server fine through the server browser (in favorites), and myself and everyone I play with are able to connect to it just fine. Could something in sourcemod be doing this? On Sun, May 3, 2009 at 2:57 AM, Mike Zimmermann rem...@remmiz.com wrote: It works fine for me though. I have the exact thing set on my server's server.cfg: *sv_search_key 1013,key:KEYHERE* And in my client's autoexec.cfg: *sv_search_key KEYHERE* And I gets tons of random people and I can connect fine using just the search key. It's full 90% of the time; I usually have to kick people off so I can get on. What do you get when you run sv_showtags? My server shows: Tags: Public : empty,key:KEYHERE1013,coop,versus,survival Private: empty,key:1013,key:KEYHERE1013,coop,versus,survival -Mike On Sun, May 3, 2009 at 4:08 AM, Jonah Hirsch crazydog...@gmail.com wrote: Here's a quick update... I have sv_search_key is this: sv_search key 1013,key:MYKEYGOESHERE both in the server *AND* in my client. I can connect to my server just fine (~80% of the time?) doing this. HOWEVER: I have only had a few (one or two) instances in the past week in which random people joined my server. Not even during the free couple of days did I have people in my server except for people I knew. So, it seems that sv_search key 1013,key:MYKEYGOESHERE does not work like intended. You will mostly get your server, but you will never find another server if you're in a lobby when your server is being used, and you will barely ever get other people in your server. Jonah Hirsch wrote: I know this has been answered before, but it's a bit too specific to read through all the sv_search_key messages for. True or false: When you have sv_search_key set, people who do NOT have it set can still connect to your server through a lobby. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Jonah Hirsch --- Sent from my Blackberry ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _ Windows LiveT: Keep your life in sync. http://windowslive.com/explore?ocid=TXT_TAGLM_BR_life_in_synch_052009 ___ To unsubscribe, edit your list preferences, or view the list archives, please visit:
[hlds] Script kiddies abusing A2C_PRINT
It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Group Banning And You
Cracking/hacking groups, same people that spam servers using A2C_PRINT. http://steamcommunity.com/groups/csrinru http://steamcommunity.com/groups/dz-community http://steamcommunity.com/groups/warez-bb And some pirate groups but since these guys don't even own the game it's pretty much a total waste of time and if they do buy and end up already being banned... well, look at it as a bonus. http://steamcommunity.com/groups/shadowofl4d http://steamcommunity.com/groups/torrent_lt http://steamcommunity.com/groups/GHETTOKING On Wed, Mar 11, 2009 at 5:19 PM, Donnie Newlove donnie.newl...@gmail.com wrote: http://steamcommunity.com/groups/hackersunite http://steamcommunity.com/groups/hardcore-hackers http://steamcommunity.com/groups/AACbyC_Style http://steamcommunity.com/groups/gtpclan http://steamcommunity.com/groups/cshackerz http://steamcommunity.com/groups/EH http://steamcommunity.com/groups/MP-Hacks http://steamcommunity.com/groups/darkcheats http://steamcommunity.com/groups/welovehackz http://steamcommunity.com/groups/PureHackZ http://steamcommunity.com/groups/hackorz On Sun, Feb 22, 2009 at 3:30 PM, Donnie Newlove donnie.newl...@gmail.com wrote: http://steamcommunity.com/groups/Get-legit Cheating site http://steamcommunity.com/groups/gHzOwnzUNigga Appears to be associated with the group above http://steamcommunity.com/groups/nsgwp Nazi group with multiple members from the cheating group above On Wed, Feb 18, 2009 at 12:17 PM, Donnie Newlove donnie.newl...@gmail.com wrote: http://steamcommunity.com/groups/Zanork_0f_g0t http://steamcommunity.com/groups/k_ http://steamcommunity.com/groups/HACK-4-LIFE http://steamcommunity.com/groups/103582791429761110 http://steamcommunity.com/groups/P7 http://steamcommunity.com/groups/houseofhacks http://steamcommunity.com/groups/MultihackAdminTeam On Wed, Feb 18, 2009 at 11:28 AM, Donnie Newlove donnie.newl...@gmail.com wrote: Both these groups are owned by the same guy and he is one of the most active ones. I don't know for sure because I could not find anything about it, but it seems that ROLEX/GodLike is just another cheater, there are a few hater groups like this, chrisaster got one as well and he is even a member. The ЯυĿż is THE BEST (R) is basically a fan club for a known cheater (ЯυĿż which is also admin there is both VAC banned and a member of many other cheating groups). Bottom line is no one that is not in the cheating community would be a member of those groups unless they just join groups at random and stumbled upon the wrong ones. And here is a few more I just found when I checked those links. :) http://steamcommunity.com/groups/AACbyC_Style http://steamcommunity.com/groups/welovehackz http://steamcommunity.com/groups/WCSSH On Wed, Feb 18, 2009 at 3:37 AM, msleeper mslee...@cyberwurx.com wrote: Up to 1530 with these groups, thanks for reporting them. A question on a few of them though that I did not add: http://steamcommunity.com/groups/dasdwasdwa Aside from having what some people (read: pansies) would consider an offensive group image, I don't see anything blatantly yelling hacks to me for them. http://steamcommunity.com/groups/rolexfailshardlol Same here, aside from some dumb kid as a group image, I don't see anything in particularly wrong with this group. Are these groups owned by owners of other groups? Or something of that nature? On Wed, 2009-02-18 at 02:37 +0100, Donnie Newlove wrote: Having updated SourceBans to the latest version I wonder what I would ever need to ban groups from the web interface, but after looking around for an hour at the steamcommunity I found that it was quite useful for proactive banning since I now have over 1000 new bans of known cheaters (and I am also quite astounded, I would not dare to dream about people being this dumb). I started off simply by searching for hacking and such and checking admins at the groups, random members, friends of the most active ones, groups with many VAC banned members, members that were part of many suspect groups, etc. Here are most groups I found with admitted cheaters and troublemakers. It appears as if there were mostly CS:S players but also a lot of CS, TF2 and L4D. Please post more useful links if you find any. Peace out. http://steamcommunity.com/groups/gangster-strike http://steamcommunity.com/groups/dasdwasdwa http://steamcommunity.com/groups/103582791430166586 http://steamcommunity.com/groups/g0ts http://steamcommunity.com/groups/phoenix-hacks http://steamcommunity.com/groups/Project-7 http://steamcommunity.com/groups/ELITESAUCE http://steamcommunity.com/groups/omegacheaters http://steamcommunity.com/groups/rolexfailshardlol http://steamcommunity.com/groups/furyon-hackers http://steamcommunity.com/groups/cheat_project http://steamcommunity.com/groups/haxorzzz http://steamcommunity.com/groups/udown http://steamcommunity.com/groups/x22shop http://steamcommunity.com/groups/360-hacks
Re: [hlds] Script kiddies abusing A2C_PRINT
What's A2C_Print? There's nothing about that on the Developer Wiki. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of 1nsane Sent: Monday, 4 May 2009 6:46 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
I believe it was initially used to send messages from the master server to the game server. Also Azui... You forgot. Exploits must be reported Monday through Friday only! Now some fatty might google his way into the ability to freeze servers. On Sun, May 3, 2009 at 5:34 PM, Yaakov Smith m4ngr...@gmail.com wrote: What's A2C_Print? There's nothing about that on the Developer Wiki. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of 1nsane Sent: Monday, 4 May 2009 6:46 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
There are several other packets not listed on the developer wiki. Like the name suggests A2C_PRINT can be send from *A*ll (master, server, clients) to *C*lients, so servers should not be affected by this. Weird. On Mon, May 4, 2009 at 12:18 AM, 1nsane 1nsane...@gmail.com wrote: I believe it was initially used to send messages from the master server to the game server. Also Azui... You forgot. Exploits must be reported Monday through Friday only! Now some fatty might google his way into the ability to freeze servers. On Sun, May 3, 2009 at 5:34 PM, Yaakov Smith m4ngr...@gmail.com wrote: What's A2C_Print? There's nothing about that on the Developer Wiki. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of 1nsane Sent: Monday, 4 May 2009 6:46 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
It works on clients and servers. A2C_PRINT is 'l' it uses the generic connectionless message. On Sun, May 3, 2009 at 4:39 PM, Sebastian Staudt korak...@gmail.com wrote: There are several other packets not listed on the developer wiki. Like the name suggests A2C_PRINT can be send from *A*ll (master, server, clients) to *C*lients, so servers should not be affected by this. Weird. On Mon, May 4, 2009 at 12:18 AM, 1nsane 1nsane...@gmail.com wrote: I believe it was initially used to send messages from the master server to the game server. Also Azui... You forgot. Exploits must be reported Monday through Friday only! Now some fatty might google his way into the ability to freeze servers. On Sun, May 3, 2009 at 5:34 PM, Yaakov Smith m4ngr...@gmail.com wrote: What's A2C_Print? There's nothing about that on the Developer Wiki. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of 1nsane Sent: Monday, 4 May 2009 6:46 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
According to proto_oob.h, A2C means Any to Client. Techically the server is a client to the master server. Don't expect this bug to be fixed any time soon, folks. Sent from my iPhone On 4 May 2009, at 00:05, AzuiSleet azuisl...@gmail.com wrote: It works on clients and servers. A2C_PRINT is 'l' it uses the generic connectionless message. On Sun, May 3, 2009 at 4:39 PM, Sebastian Staudt korak...@gmail.com wrote: There are several other packets not listed on the developer wiki. Like the name suggests A2C_PRINT can be send from *A*ll (master, server, clients) to *C*lients, so servers should not be affected by this. Weird. On Mon, May 4, 2009 at 12:18 AM, 1nsane 1nsane...@gmail.com wrote: I believe it was initially used to send messages from the master server to the game server. Also Azui... You forgot. Exploits must be reported Monday through Friday only! Now some fatty might google his way into the ability to freeze servers. On Sun, May 3, 2009 at 5:34 PM, Yaakov Smith m4ngr...@gmail.com wrote: What's A2C_Print? There's nothing about that on the Developer Wiki. -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of 1nsane Sent: Monday, 4 May 2009 6:46 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Oh fun. On Sun, May 3, 2009 at 2:55 PM, AzuiSleet azuisl...@gmail.com wrote: It seems people discovered the old A2C_PRINT UDP message and are spamming servers. http://screencast.com/t/JRYs3LglN Is there any chance Valve can fix this instead of us having to fix every exploit they ignore? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com __ Information from ESET Smart Security, version of virus signature database 4049 (20090501) __ The message was checked by ESET Smart Security. http://www.eset.com ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
It doesn't freeze servers it merely prints a message in the server console. Although it can make them lag and beep using \x07. Sent from my iPhone On 4 May 2009, at 00:17, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
It doesn't freeze, the bell character \7 freezes when it's printed. On Sun, May 3, 2009 at 5:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Huh? You mean by using \b to cover up the A2C_PRINT from x.x.x.x:y : prefix? Using \r would just make a new line. Sent from my iPhone On 4 May 2009, at 00:32, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
So what would happen on the server if I sent Hello Everyone!? Would it appear in the console? ingame chat? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
I don't know what \b is, but \r is return, it puts the cursor at the start of the line. \n puts the cursor on a new line. On Sun, May 3, 2009 at 5:36 PM, Saul Rennison saul.renni...@gmail.comwrote: Huh? You mean by using \b to cover up the A2C_PRINT from x.x.x.x:y : prefix? Using \r would just make a new line. Sent from my iPhone On 4 May 2009, at 00:32, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
It is a very good idea to post exploits on HLDS. Only Azui does not run any servers. So that's kinda mute now... is it not? On Sun, May 3, 2009 at 7:37 PM, Cc2iscooL cc2isc...@gmail.com wrote: You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Good. Will make it a higher priority for Valve to gtfo their asses and fix some exploits for once. Sent from my iPhone On 4 May 2009, at 00:37, Cc2iscooL cc2isc...@gmail.com wrote: You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
It will appear in the server console only. Sent from my iPhone On 4 May 2009, at 00:36, Yaakov Smith m4ngr...@gmail.com wrote: So what would happen on the server if I sent Hello Everyone!? Would it appear in the console? ingame chat? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
\b is backspace. Sorry never knew about \r! Thanks :D Sent from my iPhone On 4 May 2009, at 00:40, AzuiSleet azuisl...@gmail.com wrote: I don't know what \b is, but \r is return, it puts the cursor at the start of the line. \n puts the cursor on a new line. On Sun, May 3, 2009 at 5:36 PM, Saul Rennison saul.renni...@gmail.comwrote: Huh? You mean by using \b to cover up the A2C_PRINT from x.x.x.x:y : prefix? Using \r would just make a new line. Sent from my iPhone On 4 May 2009, at 00:32, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
Never heard of it. deja vu. On Sun, May 3, 2009 at 7:51 PM, AzuiSleet azuisl...@gmail.com wrote: I run a very popular Garry's Mod server, you may have heard of it, NoxiousNet. Go ahead, try and DDoS me, I'm invincible. On Sun, May 3, 2009 at 5:41 PM, 1nsane 1nsane...@gmail.com wrote: It is a very good idea to post exploits on HLDS. Only Azui does not run any servers. So that's kinda mute now... is it not? On Sun, May 3, 2009 at 7:37 PM, Cc2iscooL cc2isc...@gmail.com wrote: You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
I run a very popular Garry's Mod server, you may have heard of it, NoxiousNet. Go ahead, try and DDoS me, I'm invincible. On Sun, May 3, 2009 at 5:41 PM, 1nsane 1nsane...@gmail.com wrote: It is a very good idea to post exploits on HLDS. Only Azui does not run any servers. So that's kinda mute now... is it not? On Sun, May 3, 2009 at 7:37 PM, Cc2iscooL cc2isc...@gmail.com wrote: You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[hlds] Dos Attack Fix Plugin Updated
Hey all, Since there seems to be a script kiddie going around and abusing A2C_PRINT I've updated my DoS Attack Fix plugin to block A2C_PRINT spam. The plugin is a Valve server plugin, and does not require metamod or Sourcemod. It can be loaded in the middle of a game with no noticeable load time. You can download it from my website: http://www.sourceop.com/modules.php?name=Downloadsd_op=viewdownloadcid=9 Direct link: http://www.sourceop.com/modules.php?name=Downloadsd_op=getitlid=35 Both Linux and Windows binaries are included. Extract the contents of the ZIP file to your addons directory. Here is an example from the HLDS list of what the update is designed to block: http://screencast.com/t/JRYs3LglN Contents of the README file: DoS Attack Fix Version: 3 for TF2 Date: 5/3/09 Creator: Drunken F00l, www.sourceop.com This plugin blocks the denial of service attacks released into the wild recently. Console commands: daf_status - Returns the status of the DoS Attack Fix plugin and prints the IP address of any blocked offenders daf_reset - Resets the banned IP list CVARs: daf_version - The version of the DoS Attack Fix plugin daf_enable - Enables the DoS Attack Fix plugin (defaults to on) daf_log - Enables logging of new attackers to file (defaults to off; saves to addons/daf/log.txt) daf_block_alla2cprint - Enables blocking of all A2C_PRINT packets (defaults to off) daf_block_a2cprint_spam - Enables blocking of high volumes of A2C_PRINT packets (defaults to on) daf_block_a2cprint_nonprintable - Enables blocking of A2C_PRINT packets with strange characters (defaults to on) I hope this helps! - Tony ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
famous last words AzuiSleet wrote: I run a very popular Garry's Mod server, you may have heard of it, NoxiousNet. Go ahead, try and DDoS me, I'm invincible. On Sun, May 3, 2009 at 5:41 PM, 1nsane 1nsane...@gmail.com wrote: It is a very good idea to post exploits on HLDS. Only Azui does not run any servers. So that's kinda mute now... is it not? On Sun, May 3, 2009 at 7:37 PM, Cc2iscooL cc2isc...@gmail.com wrote: You guys do a good job of exposing your servers :) with this info the kiddies will get worse most likely since half the script kiddies watch this list for new commands to run. On 5/3/09, AzuiSleet azuisl...@gmail.com wrote: Or if you want to be really clever and cover up the message you can do \xFF\xFF\xFF\xFFl\rhello \n On Sun, May 3, 2009 at 5:29 PM, Saul Rennison saul.renni...@gmail.comwrote: All you do is send: FF FF FF FF 6C your message here Note the above is in hex ~_~. @AzuiSleet what do you mean? It freezes when it prints \x07, yes. AKA lags. Sent from my iPhone On 4 May 2009, at 00:23, 1nsane 1nsane...@gmail.com wrote: Sends messages. A quick search got this: A2C_PRINT from 68.142.72.250:27011 : No challenge for your address. A2C_PRINT from 72.165.61.189:27011 : No challenge for your address. Adding master at 72.165.61.189:27011 A2C_PRINT from 72.165.61.189:27011 : Bad challenge. Just a few examples of legit uses. On Sun, May 3, 2009 at 7:17 PM, Yaakov Smith m4ngr...@gmail.com wrote: But what does it actually do? (apart from freezing servers) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds -- Sent from my mobile device ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] Script kiddies abusing A2C_PRINT
The valve automated reply robot is 'they'. I'm assuming the 'disable' beep.sys apply only to people who run a backyard dedicated servers and get annoyed with the beep, beep beep that happens when the server is in the same room as them and doesn't do much else? -Original Message- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Unknown | zD. Sent: Monday, 4 May 2009 9:18 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] Script kiddies abusing A2C_PRINT Can you guys just stop saying / posting the exploit / command / packet capture in the wild? coz I have reported the issue to valve already and they have replied to me by saying this 3 « MESSAGE BY DWIGHT ON TUE, 28TH APR 2009 3:24 PM » Hello, Thank you very much for bringing this to our attention. Your comments will be passed along accordingly. It is much appreciated. And make sure that you have done any one of the following thing before its get fixed ... - Disable the beep sound driver (beep.sys) by delete it or disable it via devmgmt.msc when showing the hidden devices and non-PnP drivers - Start the server in GUI mode only In addition, you are always able to trace the hacker / DoSer by starting the server with -dev parameter. And yes, this command means Any to Client printing according to proto_oob.h (http://72.14.235.132/search?rlz=1C1GGLS_zh-TWHK324HK324sourceid=chromeie= UTF-8q=cache:http://www.inxbus.net/hldoc/d4/df7/proto__oob_8h-source.html) and I guess valve is using this command for maintenance / backup usage when the normal encrypted protocol from the steam server does not work. So just clam down and stop asking about that I guess valve will have to fix it soon otherwise I will just make the exploit in public . I have asked for them to fix the problem alraedy. In addition, you are able to fix the problem by yourself too if you are able to modify the engine.dll search the following string in the engine.dll and patch it by replacing NULL character to the whole string or at least to the last %s. A2C_PRINT from %s : %s And ya, cs.rin.ru will not do any harmful thing on your machine if you don't piss off them . all they do is just printing some lulz strings atm but if they really want to DoS your server . they can replace the string by using some harmful characters . so just stop and clam down about that . otherwise I guess just more server operators will get in trouble soon as you guys have given out the command / exploit directly. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
