BattlEye GUID banning

fusionofp · August 12, 2003

I am trying to use Rcon to unban a player, his GUID is in the player list but not in the ban list so unbanning via Rcon is impossible.

The server moved from Linux to Windows recently, is it possible he was banned under Linux and something went wrong with the ban list when reinstalling the server on Windows ?

I have the GUID but can't do anything with it.

He does get the " you are banned" message.

nuxil · March 8, 2007

2 step prosess.

1 * run : bans.

2 * run : removeban X

wheer X is the number you see in the list.. your not suppose to use the guid.

it will then take about 1 min before he can join the server after the ban is removed..

also. maybe you are mistaking the Be ban file "bans.txt" with Arma's ban file "ban.txt"

rcon can not delete a "pid ban" set by arma.

Edited March 8, 2012 by nuxil

fusionofp · August 12, 2003

thanks but i'ts not a PID, it's more like dcaac56fffdc788 etc, I'm not trying to unban from inside the game.

So he remains banned :(.

nuxil · March 8, 2007

I am trying to use Rcon to unban a player, his GUID is in the player list but not in the ban list so unbanning via Rcon is impossible.

this just doesnt make any sense.

if hes showing up in the player list. hes not BE baned.

BE baned players dont show up in the player list.

and again. as i said unbaning from rcon is a 2 step prosess.

run cmd: bans --> Shows list of all baned players.

run cmd: removeban X --> where X is the number to the left of his guid.

also.. if hes really baned by BE. he will not be able to connect to the server . he will only get connection refused.

if hes baned by pid on the other hand. he will get a message Baned or something like that.. so it looks like your confused about the 2 systems

Edited March 12, 2012 by nuxil

fusionofp · August 12, 2003

He was banned using Arma2Rcon. No matter how many times I reload the ban list the ID (dcca6f5b0118d490c9301d92bd162880) is not there. Arma2Rcon is working, we can use it to kick and restart the server etc ( but it is a pain to use ).

There was NO ban ingame using #exec ban.

He does get the "you are banned" message.

logging in as admin and running any BE commands produces nothing at all. When you say "run cmd bans" you mean #beserver bans ... right ?

Hypothetical: What if the ban list was lost, have the BE developers catered for that possibility ? or are the GUIDs lost forever ?

$able · March 22, 2008

He was banned using Arma2Rcon. No matter how many times I reload the ban list the ID (dcca6f5b0118d490c9301d92bd162880) is not there. Arma2Rcon is working, we can use it to kick and restart the server etc ( but it is a pain to use ).
There was NO ban ingame using #exec ban.

He does get the "you are banned" message.

logging in as admin and running any BE commands produces nothing at all. When you say "run cmd bans" you mean #beserver bans ... right ?

Hypothetical: What if the ban list was lost, have the BE developers catered for that possibility ? or are the GUIDs lost forever ?

They are not lost. If you just converted the Linux installation to Windows the bans.txt most likely is in the wrong BE folder. You have to put it into the BE working directory (in the game's application data / profiles / BEpath folder, not the install folder).

Regarding your problem, as nuxil said, that player is most likely PID-banned. Please check the ban.txt file in your server's root/install directory.

And no, to see BE bans you have to run the "bans" command in your RCon console or check the ban list shown by ArmA 2 RCon.

fusionofp · August 12, 2003

Thanks, I suspect it's a case of an old ban list.

semipr0 · July 18, 2012

Late add here but I banned the same player 4 times last night and his GUID changed every time he connected to my server.

I also banned his IP and he connected on a completely different class A block IP than the IP I banned.

Seems to me that some of the hacks available are just bypassing BattlEye entirely and randomizing GUID's and IP's as well.

$able · March 22, 2008

Late add here but I banned the same player 4 times last night and his GUID changed every time he connected to my server.
I also banned his IP and he connected on a completely different class A block IP than the IP I banned.

Seems to me that some of the hacks available are just bypassing BattlEye entirely and randomizing GUID's and IP's as well.

No, GUID spoofing is not possible if the GameSpy cd-key authentication is working on your server, as he would be kicked instantly. And you can't just use a random IP either. He probably used some proxy/VPN to connect to your server.

semipr0 · July 18, 2012

The GUID situation may be because we had reqSecureID off for a short period due to several members of our gaming community being unable to connect to the server from their home networks with other members of their household at the same time. I'll be flipping that back on and yes he probably did connect to a VPN after we banned the IP, but his GUID did change 4 times after the ban, but again that is likely our own fault.

larsiano · July 10, 2009

Maybe this is the wrong section for this but i have a question in relation to the ArmA PID's : In the past i only saw a PID made out of numbers. But now i see some players with an ' AX ' behind their names. > 19:55:42 Player Whatever connected (id=123456AX). I see this multiple times on the server from multiple players so i dont think its a hack..

.kju · October 20, 2001

http://forums.bistudio.com/showthread.php?136223-PlayerId-change-for-Reinforcements-ArmA-X-users

Holmes · May 9, 2011

Is there a way to make two separate ban lists? I run both of my servers off the same installation and when we used the normal banning system that just banned by player ID, it worked perfectly. However, in recent week's we've had exploits of that system. Is there a way to make it so battleye has two separate ban lists for each of the servers? IE defining where bans should go based on a startup parameter of the server itself. Thanks!

Dwarden · March 5, 2002

use custom profile folders and config filenames...

http://community.bistudio.com/wiki/ArmA:_Server_configuration#Windows

each server then gets own config files and logs etc. ...

sxp2high · July 16, 2009

Newly added bans disappear on reloading the bans.txt since yesterday, what's going on? http://dayzmod.com/forum/index.php?/topic/82550-server-bans-disappeared/

helldesign · February 28, 2010

Does GUID banning still work?

This happened today:

--------------------------
(2012-12-11 | 22:58:11) : Player #1 RunRabitRun ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 22:58:13) : Player #1 RunRabitRun - [color=#ff0000]personal information removed[/color] (unverified)
(2012-12-11 | 22:58:13) : Verified GUID ([color=#ff0000]personal information removed[/color]) of player #1 RunRabitRun

(2012-12-11 | 23:03:44) : Player #4 Madariaga ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 23:03:46) : Player #4 Madariaga - GUID:[color=#ff0000]personal information removed[/color] (unverified)
(2012-12-11 | 23:03:46) : Verified GUID ([color=#ff0000]personal information removed[/color]) of player #4 Madariaga
(2012-12-11 | 23:03:51) : Player #4 Madariaga disconnected

(2012-12-11 | 23:04:27) : Player #4 Madariaga ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 23:04:29) : Player #4 Madariaga - GUID: [color=#ff0000]personal information removed[/color] (unverified)
(2012-12-11 | 23:04:29) : Verified GUID ([color=#ff0000]personal information removed[/color]) of player #4 Madariaga


(Side) RunRabitRun: WHATS THE WASTELAND?
(Side) SweXD: dunno
(Side) SweXD: got a chopper? :D:D:
(Side) RunRabitRun: i give props for the debug monitor
(Direct) RunRabitRun: can u see this chat?
(Direct) Madariaga: yes
(Direct) RunRabitRun: ok is there anyone around us?
(Direct) Madariaga: no
(Direct) RunRabitRun: can u take me to cords 004 061?
(Direct) Madariaga: 004 , 061?
(Direct) RunRabitRun: yup way up north
(Direct) RunRabitRun: this is where i want my camp 
(Direct) Madariaga: ok
(Direct) RunRabitRun: can u place tents like in the trees?
(Direct) Madariaga: want helis?
(Direct) RunRabitRun: can u teleport them?
(Direct) Madariaga: yes
(Direct) RunRabitRun: it would be hard to take off here though
(Side) RunRabitRun: um can u teleport like a ural and a uaz and a pickup?
(Direct) RunRabitRun: oh shit
(Side) RunRabitRun: admins?
(Side) RunRabitRun: will you?
(Direct) RunRabitRun: that was close
(Side) RunRabitRun: are there admins on?
(Direct) RunRabitRun: oh only u
(Direct) RunRabitRun: what is this?
(Direct) RunRabitRun: lol
(Direct) Madariaga: offroad
(Direct) RunRabitRun: is this on the mpa?
(Direct) Madariaga: tes
(Direct) Madariaga: yes
(Direct) RunRabitRun: oh nice
(Direct) Madariaga: helis?
(Direct) RunRabitRun: i do want a heli but not like right here because it would be hard to take off on the side of mountain
(Direct) Madariaga: here
(Direct) RunRabitRun: hang on
(Direct) RunRabitRun: i gotta put guns in the tents now
(Direct) Madariaga: ok , 
(Direct) Madariaga: i cant help u now cause i have to do more services
(Direct) RunRabitRun: oh ok well thanks for the help so far!
(Direct) Madariaga: if u want something more tell me
(Direct) RunRabitRun: would it cost?
(Direct) Madariaga: its $1 for whatever u want
(Direct) RunRabitRun: oh ok
(Direct) RunRabitRun: thanks so much!
(Direct) Madariaga: ok:) thanks u too


(2012-12-11 | 23:21:58) : Player #4 Madariaga ([color=#ff0000]personal information removed[/color]) has been kicked by BattlEye: Admin Ban (cheating is bad!)

[GUID/IP has been banned.]
[ban-List has been reloaded.]
[ban-List has been reloaded.]
[GUID/IP has been banned.]

(2012-12-11 | 23:37:34) : Player #1 RunRabitRun ([color=#ff0000]personal information removed[/color]) has been kicked by BattlEye: Admin Ban (coop with a hacker)
(2012-12-11 | 23:38:21) : Player #1 RunRabitRun ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 23:38:23) : Player #1 RunRabitRun - GUID: [color=#ff0000]personal information removed[/color] (unverified)
(2012-12-11 | 23:38:23) : Player #1 RunRabitRun ([color=#ff0000]personal information removed[/color]) has been kicked by BattlEye: Admin Ban (coop with a hacker)

(2012-12-11 | 23:48:05) : Player #0 YourSlow ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 23:48:07) : Player #0 YourSlow - GUID: [color=#ff0000]personal information removed[/color](unverified)
(2012-12-11 | 23:48:08) : Player #0 YourSlow ([color=#ff0000]personal information removed[/color]) has been kicked by BattlEye: Global Ban #bdf677

(2012-12-11 | 23:48:48) : Player #0 OhNo ([color=#ff0000]personal information removed[/color]) connected
(2012-12-11 | 23:48:50) : Player #0 OhNo - GUID: [color=#ff0000]personal information removed[/color](unverified)
(2012-12-11 | 23:48:53) : Verified GUID ([color=#ff0000]personal information removed[/color]) of player #0 OhNo
(2012-12-11 | 23:55:55) : Player #0 OhNo ([color=#ff0000]personal information removed[/color]) has been kicked by BattlEye: Admin Ban (coop with  hacker)

[GUID/IP has been banned.]
[GUID/IP has been banned.]
[ban-List has been reloaded.]
--------------------------------

Madariaga is a hacker - spawned bunch of items and vehicles on the map.

RunRabitRun, YourSlow and OhNo is one person. He changed his GUID few times...

my "addbackpackcargo.log" looks like this:

11.12.2012 23:10:27: Madariaga (190.163.228.34:2304) 92363fa7452e13347ecc68a4dd45a016 - #1 "ItemSandbag" 0:0

11.12.2012 23:10:27: Madariaga (190.163.228.34:2304) 92363fa7452e13347ecc68a4dd45a016 - #10 "ItemSodaMdew" 0:0

11.12.2012 23:10:27: Madariaga (190.163.228.34:2304) 92363fa7452e13347ecc68a4dd45a016 - #1 "ItemTankTrap" 0:0

...

etc.

How to protect my server from hackers, and ban them effectively?

DayZ dedicated server, patch 1.62 - beta 99113, BattlEye - ON, Verify signatures - 2, config files with random names.

Edited December 12, 2012 by W0lle

W0lle · February 22, 2003

Which part of

Â§24) Do not post personal or identifying information
You are not allowed to post any personal or identifying information such as postal addresses, IPs or UIDs in the forum. Any breach of this rule may result in the poster no longer being able to make new posts or being banned from the forums. If you feel that because of security/piracy reasons you need to expose the identity of someone or make certain information known please PM this to a moderator with your reasons for doing so.

you don't understand?

Dwarden · March 5, 2002

this thread is about banning feature for admins, not for discussing BE bans / unbans or similar

bravo17 · September 8, 2007

nvm, found my answer!

Edited July 10, 2013 by Bravo17

BattlEye GUID banning

Recommended Posts

fusionofp 0

Share this post

Link to post

Share on other sites

nuxil 2

Share this post

Link to post

Share on other sites

fusionofp 0

Share this post

Link to post

Share on other sites

nuxil 2

Share this post

Link to post

Share on other sites

fusionofp 0

Share this post

Link to post

Share on other sites

$able 2

Share this post

Link to post

Share on other sites

fusionofp 0

Share this post

Link to post

Share on other sites

semipr0 1

Share this post

Link to post

Share on other sites

$able 2

Share this post

Link to post

Share on other sites

semipr0 1

Share this post

Link to post

Share on other sites

larsiano 12

Share this post

Link to post

Share on other sites

.kju 3244

Share this post

Link to post

Share on other sites

Holmes 10

Share this post

Link to post

Share on other sites

Dwarden 1125

Share this post

Link to post

Share on other sites

sxp2high 22

Share this post

Link to post

Share on other sites

helldesign 10

Share this post

Link to post

Share on other sites

W0lle 1050

Share this post

Link to post

Share on other sites

Dwarden 1125

Share this post

Link to post

Share on other sites

bravo17 1

Share this post

Link to post

Share on other sites

Please sign in to comment

Browse