My DayZ servers allow any generated cd key

[martijnk 1]

Hi, posted this on the DayZ forum as well. I got report from a player that he could join our public hive dayz servers with any generated cd key.

I test this and it did indeed work, I can't join other servers though I get invalid cd key then.

Battleye is 100% enabled as well as all the other checks but for some reason it doesn't check for a valid cd key.

Any idea how I can enable this?

[eddieck 10]

Do you have any firewall rules that may be interfering with the GameSpy communications? That is the only thing I can think of: the server is unable to validate authentication hashes with GS.

[maddogx 13]

Do you have any firewall rules that may be interfering with the GameSpy communications? That is the only thing I can think of: the server is unable to validate authentication hashes with GS.

If this is true, then the default behaviour definitely needs to be changed.

It's like a bouncer letting every schmuck off the street into a private party, just because he can't find the guest list.

[eddieck 10]

If this is true, then the default behaviour definitely needs to be changed.

It's like a bouncer letting every schmuck off the street into a private party, just because he can't find the guest list.

I love that analogy, but that behavior is there for a reason: if GS is offline, people can still play by using the remote option.

It *should* (but AFAIK, doesn't) try to authenticate every unauthenticated client when the GS server comes back online. Instead, it tries a few times and then considers the client to be authenticated if there is no response. This was actually the source of a vulnerability allowing clients to use CD key hashes that didn't belong to them, without having the CD key. (Luckily, $able was awesome enough to fix that - GS just ignored the issue.)