Hey guys,


Last night our server #1 (the modded server) was attacked by members of the SoMD clan. They got ahold of the rcon password and ran roughshod on our server for hours as we couldn't kick/ban them fast enough. Eventually we had to crash the server and change all of the passwords again. They did the same thing to the BaH server earlier in the week. We are working with members of BaH to get other security measures in place so this doesn't happen again.

Just a heads up, if you ever see anyone with an <|SoMD|> tag I would kick/ban them immediately. I can understand not wanting to do this solely on my word, so just watch them carefully. One of them came on as ~IW~ Blackbart. But we had talked to Blackbart on the IW TS earlier and knew it wasn't him.

We have contacted their ISP (who, ironically, is our ISP for the #2 server), and provided them the logs. This is the second time they have hacked our server and gave info to VSK and if VSK doesn't fix it we will drop our service from them. We are also providing all of this to the OGL as they have their team on the Classic OGL ladder.

Anyway, just wanted to let you guys know.


=LMAO= NecroKitty

Thanks Kitty.

XXOO

Cy

thanks Kitty....good to see you by the way

Thanks alot. Aprreciate it.

Although it possible for someone to find the rcon password 99.9% of the time they get it by one of these two ways.
1) smurfing as a clan members. Then they simply asks a real clan member for the rcon password.
2) Another common way people get the rcon password is someone mistakenly types it into chat and not the console.

The best way to keep the rcon private is
1) Never tell anyone the password, if another *clan-member* needs it. Never give it out in MOHAA, if someone needs it email it to them. This is the only way you can be sure who your giving it to.
2) Never type the rcon password in mohaa, sooner or later you'll type it into chat by mistake. The best way to take care of this problem is use a script.
Make a file in the MOHAA/main directory and call it rcon.cfg
Inside the file you'll have this
rconpassword yourpassword
rconaddress your server IP address
Then when you need rcon access open the console and type
exec rcon.cfg
If you do it this way you'll never accidentally typing your rcon password in chat and give it to everyone playing on your server.


If you use my suggestion of rcon.cfg
You can even go one step further and bind it to a key.
Open console and type bind f8 exec rcon.cfg
Then all you have to do is hit f8 and you'll have rcon access.
You can bind the script to whatever key you want.

I'm already pretty rough on MOB's servers, u know,
it takes alot of power to calculate all my kills.
Sometimes my score gets so high they run outta fingers
and toes, thats when they pull out the big calculator.......

QUOTE (Cold_Beer @ Jun 11 2003, 04:21 PM)

I'm already pretty rough on MOB's servers, u know, it takes alot of power to calculate all my kills. Sometimes my score gets so high they run outta fingers and toes, thats when they pull out the big calculator.......

So off base. Do restrain in the future.

thanks for the heads up

and thnaks for the info druid I will try that out

Epacy, it was a,......... JOKE. Remember those?

QUOTE (Cold_Beer @ Jun 12 2003, 08:30 AM)

Epacy, it was a,......... JOKE. Remember those?

airgo....

airgo? please enlighten me, wtf does that mean?

QUOTE (Cold_Beer @ Jun 12 2003, 09:04 PM)

airgo? please enlighten me, wtf does that mean?

visa-vi

Ep, define it in your own words, or at least use footnotes.

QUOTE (Cold_Beer @ Jun 13 2003, 12:38 AM)

Ep, define it in your own words, or at least use footnotes.

quid-pro-qou

Choke Yourself

lol, cmon beer u doont know any of those. I think hes had enough Epacy.

Well, we got the SoMD clan kicked off their ISP. This is the letter the ISP guy sent to their clan leader:

>From: "VSK Gaming Servers" <ray@vskgamingservers.com>
>To:
>Subject: Re: server being attacked
>Date: Thu, 12 Jun 2003 13:07:44 -0500
>
>Well I sent him this:
>
>This shit is getting ridiculous, I've seen the logs again & you told me
>you would stop. I get emails almost every day from clans complaining of
>you guys crashing their servers or at least threatning to, many of which
>are our own clients, I just checked the logs from another one of our
>hosted clan's machines & sure enough it's your ip. I'm done here, take
>your trouble-causing ass somewhere else 'cause you're no longer welcome
>here.
>
>If this happens again I will turn the logs from all our machines to the
>authorities & see to it that your denied service from your isp.

(message edited for painful misspelling and grammar errors)

Apparently, they then tried to get a server from FragCentral (who hosts our #1 server). I think they turned them down, since all of their IPs were just banned from their servers a few days ago...

nice....way to follow up on these jokers and teach them a lesson

i dont mean to get off the subject kitty...but why does LMAO think i am a hacker? I DONT HACK! iam a fuckin stupid ass when it comes to computer shit man. nixon told me when i get kicked from servers, its because i have the wrong skins from city nights, but i fixed that. i really enjoyed playing on your guy's server until my ass was getting shocked by a 1000 volts of electricity and it was accusing me of being a hacker. no LMAO was even online at the time. i just dont get it. so if you dont want me on your server thats fine. iam sorry LMAO thinks i hack, it isnt true.

Aternus, was this on Southern France? And if so, did you try and jump on those hanging wires to get onto the roof of that one building with the walkway across the courtyard?

There is a trigger that needs to be fixed in that map. If you did that it would set off the "embarrass the cheater" script. If you are still able to get back onto the server, then that's what happened. If you aren't, then someone kicked/banned you for cheating. However, if there were no =LMAO= folk on I'm guessing you just accidentally tripped the trigger. It's on King's list of things to fix

Let me know; our forums are at www.lmaos.com/forum


~Kitty

Nice! Old Man needs something like that so he can trademark his camping...I mean ambushing spots.

I don't try to fool folks into thinking I'm 'smart' with fancy-pants
talk, I jus' talk plain straight shit. I got a degree, but i went to
school to hunt pussy. I already knew how to read
and write before I went. So for shit-talking's sake, lets keep it
to 1 language.

Now Panzer, eat this jelly donut while the rest of the platoon does pushups.

QUOTE (Cold_Beer @ Jun 16 2003, 01:57 AM)

I don't try to fool folks into thinking I'm 'smart' with fancy-pants talk, I jus' talk plain straight shit. I got a degree, but i went to school to hunt pussy. I already knew how to read and write before I went. So for shit-talking's sake, lets keep it to 1 language. Now Panzer, eat this jelly donut while the rest of the platoon does pushups.

Where do you come up with this shit. rotflmao.

Zillah

".......I only spew truth."(1)

Zillah, my mind is a complex piece of high tech machinery.
A man of,..... 'average' intelligence like yourself has a natural
state of wonder about himself as he reads my poetry, and questions
from such readers are numerous. But to answer your question,......
I jus' make da shit up. Emsayin?

This is how you use footnotes by the way. You'all.


(1)MOB forums, General Discussion, Pinned: Tell us what you think, Author of reply, Epacy. Jun 8 2003, 10:54 PM, page 2. Post # 962.