next »

[fortpilar]

we need some advice as to how to ban this guy. he is annoying almost a lot of servers in cod4. the main problem with him is he has a B3 blocker or something. we cant find him on list, we cant ban him. i hope we can find a solution for this kind of people. pls reply here or notify me thru email roddel007@gmail.com

[Courgette]

Hi

which guy ?
post your B3 log showing this guy connecting and you trying to ban him
which version of B3 are you running
which game ?

[fortpilar]

His name is Peterlmad.

Call of duty 4.

he has been terrorizing all call of duty 4 servers. pls help. he appears to be immune b3 and rcon tools. we have b3 version 1.5.0

They say this is his GUID 826c0bfd1f5b48b56f5d5557a8d05632

i hope u will release a patch for these kind of cheap people.

[MordyT]

Well, seeing as that GUID is GLOBALLY banned by punkbuster, I would have to say if you have it in your ban list, should prevent him from connecting.

Furthermore, if all RCON tools are affected by him, then he is flooding the RCON port. In which case use a UCON tool (like pb power or pb web tool) to kick him.

Courgette is hopefully working on a UCON plugin for B3 so flooding will no longer be a issue, but remember this is not a B3 bug. Vote for this here: http://goo.gl/mod/lSBu

[fortpilar]

problem is we dont have punkbuster installed on the server.

i remember one time when we installed the new b3, they were vulnerable to ban, but soon i think they found a way to hack again and now immune to b3 again.

i hope u will be able to come up with a way to stop them from destroying.

@courget http://www.mediafire.com/?tolgqdwpgl7y833

[Spoon]

add there guid to the banlist.txt in the server?

[MordyT]

problem is we dont have punkbuster installed on the server.

i remember one time when we installed the new b3, they were vulnerable to ban, but soon i think they found a way to hack again and now immune to b3 again.

i hope u will be able to come up with a way to stop them from destroying.

@courget http://www.mediafire.com/?tolgqdwpgl7y833

Ah. Well, in that case, once they are on, if they flood the rcon port, you are sol.
Try adding them to the ban list as suggested.

[Courgette]

still no b3.log ? We cannot do anything else than advising to enable punbuster on your server

[Mikobiko]

This is actually fixable no problem. As stated, it is a game engine "feature"

his unofficial patch is referred to a Denial of Service which can be launched
    versus the RCON service of the games based on the Quake 3 engine.
    Actually the only public reference about this problem seems to be my
    "Multi engine RCON tool and password guesser" (multircon) tool.
    .
    In short if an attacker sends more than 2 packets per second the RCON service
    will become unavailable for the valid remote admin.
    That's caused by an anti brute-forcing check which drops all the packets arrived
    within half second from the previous one.
    .
    If you are unsure if your server is vulnerable test it with multircon:
    .
        multircon -i -b 10 09AZaz -d 100 SERVER PORT
    .
    and in the meantime try to send rcon commands to your server, if you are
    vulnerable all your commands will be ignored (check function SVC_RemoteCommand).
    .
    Note that this patch has been tested with almost all the latest releases of
    these games (dedicated servers) for both Windows and Linux, older versions will
    be NOT supported by me, so don't ask.
    .
    Contact me if you have the latest version of a game and this patcher is not able
    to find the pattern to patch.

http://aluigi.altervista.org/patches/q3rconz.lpatch

Aluigi has had a patch posted for ages. Please note if you use this, you need to increase the strength of your rcon password.