benu

The linux server does save the logfiles. For the windows server you could use -netlog, which generates huge logs full of superflous data, or you have to find a way to get the logs from the server somehow, but i guess you would need to modify the executable for that...

And play on an empty (public) server...

As i spent this day fixing bugs from taleb.pbo and na.pbo i would advise caution with this pack. I am not sure which parts are reworked for the new afghan everon, but i may be worth to wait until this is out.

The bas_mh6185 class is from the bas_lbs185.pbo. So far i couldn't find any error in it, it declares bas_soar185,bis_resistance,ah64 as it's dependencies and does not seem to use anything not from these addons. It may be an "inherited" dependency from bas_soar185, but that looked ok too on first glance. It may also be some different addon altogether that is depending on the bas_mh6185...

You do not even know what i check for yet you assume my checks do not work. Actually they do work. Please tell me WHICH EXACT CHECK does not work if you claim something like this. That is for every admin to decide. People that do not have modified files don't get warnings, i tried with cwc+res and goty edition. This will not hold true for some foreign versions of ofp, but that is acceptable for me. Not on our server, all admins and regulars are informed what those warnings mean. And as most of our regulars use selfmade mods like nvg, compass, sound and texture mods they are used to the occasional message. Not that you get a message if you only use dynamic range or a skymod on my server. I do this all the time and do not get a modified message. If he gets this message he has modified a texture in the merged.pbo. It is for the admin to decide if he wants to let those players play. And as this can be used for cheating nobody can demand to play on a server with such modifications. But this is part of the server policy and for every admin to decide for himself. Wrong. Easy: #debug checkfile mfcti1.16\config.cpp The folder does not matter for this check, as you don't check for file path but for used config. No. You did not make any. You just repeated your denials again. And you failed to give the answer i asked you about: How do you check if a player is using the supercheat? Post the exact checkfiles line.

Reinhard66 sent me a few more pics, you can see all of them (and in better quality) here: He also told me that the island was lagtested with 6 platoons of soldiers and had no lag for him. Some of the new vegetation has been made by Jojimbo from I44 mod.

This island is very high on the wishlist of our mission makers. It really looks very good. Glad to hear that it is being released soon

LOL, I have to stop assuming shit?!? If anybody else had said that i would reconsider, but from you this sounds like a bad joke. Try disabling checkfiles altogether if you rather not like to see warning messages. And why come i (and the admins from alsr) have reliable results using those checks? Well, you have never seen my checkfile rules, but thanks for assuming so much about them, like that they are fucked up. Rather constructive, assuming and insulting. Not that i am surprised. I don't accuse innocents and i don't ban them. But people running several cheat pbos using a hacked ofp executable, from a modfolder that is named with a random string and is not shown on connect can not be assumed "innocent", or can they? Oh, i forgot, the supercheat i downloaded and analyzed does not even exist, as you said before. Please post the exact line of your checkfile that detects the above mentioned cheat. I am always willing to learn. So that you know what we are talking about: -hacked executable -randomly named modfolder, not shown on connect -several pbos, containing scripts and other cheats -aimbot and colored models -islands without objects -etc All in one cheat. Please post your exact checkfiles line. I had only 4 cheaters, all in the last two or three weeks, all using the supercheat. Cheaterfree in the years before. The cheat is not 3 years old, they are only getting popular since a few weeks ago, so your numbers are meaningless. And according to your posts i can't do simple math anyway, so why do you ask at all? Please Malboeuf, one single and simple question: How do check for usage of the supercheat? Post your exact checkfile line. No "my server is this" or "i am admin for that number of years". Just one straight answer. Can you do this?

just as the fact that it has not been done but yet it's a "BIG DANGER" now theres Logic - This is OFP dude, not Web Porn, no one wants in here It has already been done. On several servers last week. Not on your server though. Not on mine either ;) So your "nobody is doing this" rants are really counterproductive, as the tools are out, the people doing this exist and the danger exists. It is not really a high percentage of danger as most of those "script kiddies" do not seem to want to go as far as crashing servers all the time, but it can be done and it already has been done. People waste their time trying to inform themselves about cheaters and their tools and trying to counter it. And when those people post warnings here you could just be civil and ignore them if you think they don't apply to your server. But don't post stuff that discredits them as liars or idiots.

yes, we know, and none of them have heard of OFP and if any one can bring down a winOS OFP server its me It's not about crashing the os, it's about crashing the ofp service. I guess i assumed to much when i thought you actually READ posts before making your bullshit replies. Yeah, a totally good argument. "It's never been done before so it will never be done in the future". LOL. so nothing could ever be done for the first time, and nothing ever has, following your "logic". Man, we waste our time in these cheater forums to create countermeasures quickly, and those hacks are really new, it's no surprise that YOU never encountered them before. Check for when the supercheat came out and compare it to the increasing posts about cheaters in this forum. Now the admin pw cracker and the server crasher are out. Let's wait and see. Blablabla, in all my life i have not seen japan, so it can not exist. And the rest of the world also. And if canada gets "static" dhcp ip ranges, then all of the world do too. This is true by malboeuf decree, and it does not matter if people from other parts of the world say that it isn't so, cause malboeuf is the only one to judge about truth and reality. And everything that is too big for his little brain simply does not exist, can not exist. Actually, there are at least two sites with the declared purpose of destroying ofp and those are the same sites that distribute those tools and all other ofp cheats. But, oh, i forgot, you've never seen those sites, so they don't exist.

I don't get any merged errors, so if i argue like you, this means that others can't get merged errors either. Oh, i guess it doesn't, as i am not master of reality and one and only judge of truth and reality malboeuf. LOL. And all those checks work 100%. I know it cause i use them every day. And alhough you do not use them i guess you will know better again, without having tried ever. Well, you can't force anyone, if you don't want working checks against than i can't help you. But i think it's really sad that you spread your fud here, this only makes it worse for admins that do want to inform themselves.

LOL, you obviously have no clue what you are talking about. We check for CLASSNAMES, not pbo names. And for your three years, i am a server admin for 6 years now, following your string of arguments that would make me automatically right in all discussion that we two have. @all: you have to copy the merged.pbo from res\dta\hwtl to res\dta on the server for all the checks to work. Go to ALSR board. You will find more info there. And YES, the checks work even for files that you do not have installed.

You have to subtract 2**32 from all those large numbers (10 digits long integers, starting with a 4), ie convert them from unsigned to signed int. I made a tool for this, you can get it here. I can't guarantee that this is the only thing you have to change to make the config work though. CPP2BIN is quite nasty, it can only convert configs made with unpbo or similar, it can eg not convert bis original config.cpp to config.bin...

I actually like output like this in my logs: <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE">Gricoli uses modified data file - cheats\init.sqs ]DSE[Lee uses modified data file - cheats\init.sqs ]DSE[Lee uses modified data file - res/addons/cheats.pbo pingonete uses modified data file - cheats\init.sqs This has more info than just "modified g36a\config.bin". And what do you do if they do not even modify the config.bin but the config.cpp?

reinhard66: i can upload the images to medicus filespace (or somewhere else on our server) if you want to.

bas_repair has the same dependency bug, it is dependent on the ah64 without declaring it. I am already using a fixed version on my server, so i couldn't really tell if this was still an issue. I noticed the. bas_mh6185 (afaik part of the littlebirds) issue too lately but had no time to look into it yet. Seems there are some bas addons that aren't coded correctly...

This is not about paranoia but about existing tools. The ofp supercheat exists, the pw cracker for ofp servers exists too. As does the ofp crashing tool. You never know what pws other admins use, so it's better to inform them. Who knows how many people use "ofp" or something similar as admin pw...

Also, you need to bump the requiredversion to 1.85, as requiredaddons is only supported from that version upwards.

On a related note, it might also be a good idea to set up a traffic shaper or similar to limit the number of connections per second to the ofp server. Something like this for linux servers: <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE">iptables -I INPUT -i eth0 -p udp -d $SRV_ADDRESS --dport 2302 -m state --state NEW -m limit --limit 2/second --limit-burst 4 -j ACCEPT iptables -I INPUT 2 -i eth0 -p udp -d $SRV_ADDRESS --dport 2302 -m state --state NEW -j DROP It seems there are tools out there to crash ofp servers by the way of opening many connections at once.

And that is WRONG. We don't check for filenames but for loaded configs. If you check for g36a\config.bin you will do a check on the g36a the player uses, regardless of path and filename. I really like people like that do not even care to inform themselves about what can be done but just go off telling everyone how "impossible" this is. And when presented the solution they don't even care look at it but just repeat their stupid denials. Read my post: i already detected those supercheater users. Even though they just randomly generated file pathes, hacked exes, etc. It IS possible. Although you can see that watermans checkfile lacks the essential checks and it will therefor not detect most cheats...

Gadger, i can say from experience that bad pws can be cracked in less than a second using dictionary attack. I ran a pw cracker over a pw file with several hundred pws and the bad pws were found in less than a second. On a slow machine. All found PWs had 7 or more characters. I am not sure if they use dictionary attacks or brute force and you are totally right about the time it takes for brute force attacks, but you are wrong about the times for dictionary attacks. And i think it is better to be safe than sorry.

Click the ALSR link in sicilians signature to get the latest info on cheat prevention.

I detected three players using the socalled supercheat. Blackden: do you only copy the news from the cheat sites to this forum and spread hysteria/paranoia or do you actually download the cheats, look into them, analyze how they work and try to do something against them?

Except that i did already detect three of them...