Server Security /Fake Players/
 

Hello guys! I'm Chilean player of UT2004 and me and my friends need your help

We have three servers working up fine but we have little troubles of security
A troll guy injects our servers whit 'Fake Players' using this shit http://aluigi.org/adv/unreaload-adv.txt from Luigi Auriemma, the problem is that my server collapses whit all the fake players entering in my server and we don't know how to stop it

So we tried to found a fix recommended by the owner of this program and we only found this: http://aluigi.org/patches/unrealoadfix.txt

and it doesn't work cause in our engine.dll we couldn't find the value hex '74' :(!


So plz Guys We need your Help :)
(The server is fixed to "VoiceIndex<VOICE_MAX_CHATTERS" / ;)

Really, Thnx and I'm waiting for any answer... :D


(And srry for the English, i did an effort xd)

Did u try the last bit that is mentioned here ?

No fix

Exist at least 2 easy work-arounds for this vulnerability:

- setting "AllowDownloads=false" in the INI file of the game.
naturally this method can't solve the problem if exist other ways
(of which I'm not aware at the moment) to exploit this vulnerability

- disabling the "!Closing" assertion (tests performed on the Windows
and Linux servers of some games), the list of the bytes to modify
with a hex editor is available here:

http://aluigi.org/patches/unrealoadfix.txt

- there is a "strange" way that has avoided the termination of the
server (and I report it here only for thoroughness) through the
enabling of the map voting (like [xVoting.xVotingHandler] and
bMapVote=True in the INI of UT2003 and UT2004)

Ouue yep :S, and this shit didn't work :(!!...........


Anyone knows the solution?

With "security" being in the subject line, I do have a question regarding the overall security of UT2K4.

More specifically, I want to ask about DDoS attacks, I'm well aware of the damage it can cause and thus know there's not much that can be done about it, but I want to know some of it's history with this game, I run UT3 on default ports with reporting to master servers and haven't had a problem, whereas Quake 3/any ID Tech 3 related game on any port is just asking to be attacked.

I want to host UT2K4 from my VPS but unsure of it's history with this common, incurable problem.