Author Topic: Admin Failed connect - server crashed (Read 5338 times)

Zapper · « **on:** September 05, 2010, 01:34:49 pm »

Hellow,
some1 (not me) make ugly program that can crash every soldat server, its very simple, that program send some sockets that simulate adminloging with bad passwords, after some wrong tries server will get crashed.
If u dont believe me: http://yfrog.com/f/bfbeztytuufyxj/ ss is not my
That bug constains in soldatserver 2.6.5 (dont know 'bout highers)
I think that NCS should make patch that will ban IP that fails adminlog 10 times.
And man who create that "Server Crasher" is called "Polifen" he has account here, and he is from P[r]oland.
Sry for my bad english.

Polifen · « **Reply #1 on:** September 05, 2010, 01:42:55 pm »

Yes, I wrote it, no, I didn't use it. This bug is quite well known and was used by a few more Soldat "hax0rs".

Edit: It should be in Server Help i think.

Stuffy · « **Reply #2 on:** September 05, 2010, 03:11:50 pm »

iptables. Is the only way right now I think. Ivy and some other "haxxors" did it to my server without any reason. I dont know, maybe they think its cool.

Silnikos · « **Reply #3 on:** September 05, 2010, 05:36:55 pm »

I had the same problem, there's no clue, you cannot do anything about it. I doubt it's fixed in new soldat server version.

Bonecrusher · « **Reply #4 on:** September 06, 2010, 07:05:39 am »

Well there's some sort of firewall hardcoded in dedic server but it only occurs on joining game.

Polifen · « **Reply #5 on:** September 06, 2010, 08:39:41 am »

You can't firewall admin TCP connection, but you can use max admin connection. For most servers you can set MaxAdminConnection to 1 and just use the 1 slot with ARSSE. Next connection will be automatically disconnected. Tested and works for 1 crasher, i have no server to check if it will work with more crashers running.

Silnikos · « **Reply #6 on:** September 06, 2010, 01:12:19 pm »

Quote from: Polifen on September 06, 2010, 08:39:41 am

You can't firewall admin TCP connection, but you can use max admin connection. For most servers you can set MaxAdminConnection to 1 and just use the 1 slot with ARSSE. Next connection will be automatically disconnected. Tested and works for 1 crasher, i have no server to check if it will work with more crashers running.

Most servers got more than 1 admin.

Polifen · « **Reply #7 on:** September 07, 2010, 01:32:51 am »

I think most servers use remote admins, ARSSE is usually only for the owner, but if you know that you will use 2 admin slots it should stop crasher. I'd need a server to test it, but my hosting died this month.

Silnikos · « **Reply #8 on:** September 07, 2010, 07:39:22 am »

Quote from: Polifen on September 07, 2010, 01:32:51 am

but if you know that you will use 2 admin slots it should stop crasher. I'd need a server to test it, but my hosting died this month.

To test what? Of course that if you got 2 admins connected and max connections set to 2 it will stop the attack, but you're not connected 24/7, are you?

Polifen · « **Reply #9 on:** September 07, 2010, 11:51:55 pm »

But the number of slots left could be so low, that the server won't crash, also I'm not sure if MaxAdminConnection=3 and 3 admins logged in would really stop the program.

VinceBros · « **Reply #10 on:** September 11, 2010, 08:34:59 pm »

Someone is doing it to my server too.

EDIT: That sucks, as soon as my server is up it gets crashed. Hope it gets fixed as soon as possible :/

xionxinks · « **Reply #11 on:** September 11, 2010, 10:58:36 pm »

One of these hackers is Skaradisium.
His ip is 65.188.138.170.
Watch for him or try to prevent him, im not quite sure.
Hope this rampage stops.

VinceBros · « **Reply #12 on:** September 12, 2010, 12:52:54 pm »

Yea, when i IPTRACK him, i also get this name.

This is really annoying..

Amida · « **Reply #13 on:** September 13, 2010, 04:43:12 pm »

Quote from: Polifen on September 07, 2010, 01:32:51 am

I think most servers use remote admins, ARSSE is usually only for the owner, but if you know that you will use 2 admin slots it should stop crasher. I'd need a server to test it, but my hosting died this month.

This works for a while but eventually it will cause people to disconnect from the sever and then crash it..

(22:36:43) Admin connected (65.188.138.170).
(22:36:43) Admin failed to connect (65.188.138.170).
(22:36:43) Admin connected (65.188.138.170).
(22:36:44) Admin failed to connect (65.188.138.170).
(22:36:44) Admin connected (65.188.138.170).

So there certainly needs to be a fix for this or that Skaradisium ass hat will continue to crash servers.

VinceBros · « **Reply #14 on:** September 14, 2010, 02:26:37 pm »

Skaradisium randomly went on one of the server i'm admin and he's a total asshole, he just lies and says he doesn't do anything. After i kicked him from the server, he crashed one of my servers.

Furai · « **Reply #15 on:** September 14, 2010, 02:43:56 pm »

Back to former days when this forum was a bit more active - naming cheaters/hackers and methods they use was forbidden. Cause was simple and clear - not give idea to other lamers how to cheat/crash your server.

VinceBros · « **Reply #16 on:** September 14, 2010, 02:46:06 pm »

Well he's not like a hacker in some ways, he's more like a server crasher and imo, people should know who he is to prevent his bullshiz

Polifen · « **Reply #17 on:** September 15, 2010, 03:32:56 am »

That's good that ppl use this exploit. Maybe eC will do anything, this exploit exist for a very long time.

CheeSeMan. · « **Reply #18 on:** September 15, 2010, 07:37:08 pm »

Quote from: Polifen on September 15, 2010, 03:32:56 am

That's good that ppl use this exploit. Maybe eC will do anything, this exploit exist for a very long time.

we can only hope.

Bonecrusher · « **Reply #19 on:** September 16, 2010, 10:39:00 am »

Quote

(17:36:46) 89.174.36.53:23073 requesting game...
(17:36:47) 89.174.36.53:23073 requesting game...
(17:36:48) 89.174.36.53:23073 requesting game...
(17:36:49) 89.174.36.53:23073 requesting game...
(17:36:49) 89.174.36.53:23073 requesting game...
(17:36:50) Firewalled IP 89.174.36.53

Wondering if it's hardcoded in soldat server or is it my hoster feature. If hardcoded then nsc can just get it to work with on admin connection and we have this problem solved

Stuffy · « **Reply #20 on:** September 16, 2010, 10:46:13 am »

Soldatserver has got a requesting game flood protection.

Blue-ninja · « **Reply #21 on:** September 16, 2010, 05:12:28 pm »

Yeah, that's normal.

The other thing is the admin failed to connect floods. Without a firewall, this server vulnerability rivals the size of Kirk Johnson's flexible poopchute.

Zapper · « **Reply #22 on:** September 17, 2010, 03:28:49 pm »

Code: [Select]

requesting game flood protection.Nope. If it would have it, there will be not any "crashers".
I think that nup NCS should read that topic and make #some patch.

Silnikos · « **Reply #23 on:** September 17, 2010, 06:39:50 pm »

Quote from: Zapper on September 17, 2010, 03:28:49 pm

Code: [Select]
requesting game flood protection.Nope. If it would have it, there will be not any "crashers".
I think that nup NCS should read that topic and make #some patch.

game request=/=admin connection

Zapper · « **Reply #24 on:** September 19, 2010, 01:59:40 pm »

I think that NCS is not reading that topic / category.

Stuffy · « **Reply #25 on:** September 19, 2010, 03:15:49 pm »

I think NSC is not reading any topics/categorys

Polifen · « **Reply #26 on:** September 20, 2010, 01:38:12 am »

I don't have any server atm, someone with the problem could msg him. As we can see in this topic, it's not just one person's problem.

Furai · « **Reply #27 on:** September 21, 2010, 05:55:38 am »

Maybe this is the cause of crashing the servers:

Code: [Select]

OnScriptCrash=shutdown
Have you tried to crash server that way with scripting off?

Zapper · « **Reply #28 on:** September 21, 2010, 06:35:58 am »

@UP
no. Servers is not crashed by script.
Its something like arrse, but it use wrong password many times.

Stuffy · « **Reply #29 on:** September 21, 2010, 07:49:03 am »

Its a tcp-admin connect try. You cant do it with any brute-force-programm out there. Some kind of "DOS".

News:

Author Topic: Admin Failed connect - server crashed (Read 5338 times)