GsProtector V3.8

Mod File number (downloads) -

GsProtector 3.8 Beta (142)

MD5

Type -

Tools

Server / Client -

Server Side

Mod Sub Cat -

N/A

Mod Version -

3.8 Beta

Total Views -

Mod screen shot -

Mod PK3

PK3 MD5

Mod External Info -

SCAPP

SCAPP

http://www.scapp.net

Game Type -

MOHAA

Mod Creator -

Joto

Mod Status -

Fully working no errors

Team -

Theme -

Rating

Extra Credits -

Iinstall / info

The Gameserver Protector protects your Game server from several attacs to the server like flooding attacs, remote crashing.
Additional features are Anti Lag, Banning of IP's, Firewall bans, different types of Whitelists, Immunelist for IP's, Shielding mode for Warservers.
Features can be controlled through config files and via Rcon (Ingame or via Rcon Tool)

Installation

Extract the zip archiv and place the files in your root mohaa folder (where the mohaa executable is) and restart your game server.
(Important: Please change the passwords in the GsProtector.ini file: rconpw and loginpw to strong passwords.)

You should then when you start your server see a GsProtector_logfile.txt generated in your server folder. You can also test with a rcon gpstatus if all is setup properly.

Deinstallation

Remove (all) the files from your root mohaa folder and restart your game server.

Anti Flooding / Anti Lag and Auto ban Flooders

Banning

Firewall bans

GsProtector offers the ability to issue IP bans directly in the windows firewall.
To make use of this option the gameserver has to be started with sufficient rights, usually as administrator, and the settings have to be set accordingly which are:

pathToNetsh: the path to netsh.exe, usually "c:\Windows\System32\netsh.exe"

appPort: the listening port of your gameserver e.g. 12203. This is used as identifier in the firewall, aswell as blocking the IP only for this specific port (this applys to winserver 2008/win7 only, on win2003/win2000/xp all ports will be banned for that IP)

FirewallBans: set here whether to allow firewall bans or not

Please note: If firewall bans aren't allowed and Banning is set to 2 no bans will be issued

Caution on win2003/2000/xp server, if u test-ban yourself make sure you can access the firewall somehow.

The Config Files

GsProtector is controlled via 2 config files: GsProtector.ini and GsProtector_Host.ini

The GsProtector_Host.ini has settings for the Gameserver Hoster:

[common]
FirewallBans=0
OperatingSystem=0
GameType=0
pathToNetsh="c:\Windows\System32\netsh.exe"
appPort="12203"

FirewallBans: wheter to allow (1) or disallow (0) bans in the firewall of the windows server.
OperatingSystem: 0= WinServer2008/ Win7/Vista, 1= WinServer 2000/2003/XP
GameType: The type of the Gameserver, e.g. 0=Mohaa, 1= Spearhead/Breakthrough
pathToNetsh: The full path to the netsh.exe command line tool (required for firewall control)
appPort: The listening Port of the gameserver. Also used as identifier for bans in the firewall

The GsProtector.ini has these settings:

[common]
Banning=1
AntiFlood=1
AutoBanFloods=1
MaxQueriesPerSec=50
MaxRconPerSec=10
MaxConnectPerSec=10
PrintInfo=1
AutoUnBan=3
AutoUnBanHours=24
WlQueries=0
WlRcon=0
WlJoin=0
ImmuneList=1
Logging=1
FloodValueMs=50
FloodPacketsThreshold=5
FloodPacketsIP=10
performChallenge=0
rconpw="thepw"
loginpw="thepw"

Banning: 0=off, 1= internal bans only, 2 = firewall bans only, 3 = internal and firewall bans

Shielding and Login

This is a mode meant mainly for war servers.

Players register with the server by doing a login. War admin handles out the gploginpw to the players, they do a "rcon login" in their ingame console or via a rcon tool.

Now the war admin sets the Shield to 1 and the server is in shield-mode which means only those players previously logged in can join or play, getstatus queries to the server are limited and also only those player registered can issue rcon commmands.
It is like a passworded server with the addition that it also cares about query and rcon requests.

Whitelists and Immunelists

GsProtector offers Whitelist for Join/Connected Players, Rcon and Queries and an Immunelist to immunisize IP's.

Immunelist: No checks will be done for network packets that come from IP that have been immunisized Rcon command to add IP to the Immunelist: ImmuneAdd
Rcon command to remove IP from the Immunelist: ImmuneRem

Whitelist: IP's on a Whitelist are exclusively allowed for the server if the specific whitelist is turned on.
Rcon command to add IP to a Whitelist: WlAdd wlType: [0,1,2] (0=queries, 1=rcon, 2= join)
Rcon command to remove IP from a Whitelist: WlAdd wlType: [0,1,2] (0=queries, 1=rcon, 2= join)
You need to specify to which Whitelist you want to add the IP with the WlType.

Example:
As Admin of your server you want to be the only one allowed to issue rcon commands in the server, then you add your IP to the Rcon Whitelist: rcon WlAdd 1 192.168.0.255
Where 1 specifies the type of the Whitelist = here Rcon and 192.168.0.255 is your actual IP.
Now you turn on the Whitelist for Rcon with: rcon WlRcon 1
Alternatively you can also do a login with the server (as described in Topic Shielding) which adds your IP automatically to all Whitelists and turn on the Whitelist for Rcon only.

Remote Crash Fixes

The GsProtector protects versus different remote crash attacs.
However it does not fix any vulnerabilities that are related to the gameserver engine itself like mohbuf fill attac.

Log files

These logfiles will be created:

GsProtector_logfile.txt

Contains info about the status of GsProtector
If Logging is set to 1 then Rcon, Player Connects will be written to log files.
If PrintInfo is set 1 information about the packets that have been sent to the gameserver in a timeinterval like how many queries, how many banned packets will be written to the log file.

=======Sun Apr 01 17:23:40 2012
Config settings loaded, GS Protector working.

=======Sun Apr 01 17:23:40 2012
Gameserver Protector Current Config Settings:
OperatingSystem= 0
appPort= 12203
loginpw= test
Banning= 1
AntiFlood= 1
AntiLag= 1
MaxQueriesPerSec= 50
MaxRconPerSec= 10
MaxConnectPerSec= 10
PrintInfo= 1
AutoUnBan= 3
AutoUnBanHours= 24
WlQueries= 0
WlRcon= 0
WlJoin= 0
ImmuneList= 1
Logging= 1
FloodPacketsMs= 50
FloodPacketsThreshold= 5
FloodPacketsIP= 10
performChallenge= 0
Shield= 0

=======Sun Apr 01 17:25:42 2012
Received Packets Info.
Timespan: 60001 ms
Packets: 16
Queries: 16
Banned Packets: 0
Connect Packets: 0
Rcon Packets: 0

GsProtector_PlayerConnectDetails.txt

Details of the player connecting to the gameserver will be written into this file.

GsProtector_log_attacking_IPs.txt

If an attac is detected the IP of the attacker is written to this file.

Rcon Commands

These are Rcon Commands you can use:

Banning [0,1,2,3] (0=off, 1=internal bans, 2=firewall bans, 3= internal + firewall bans)
AntiFlood [0,1]
AutoBanFloods [0,1]
MaxQueriesPerSec [10-9999]
MaxRconPerSec [10-9999]
MaxConnectPerSec [10-9999]
PrintInfo [0,1]
AutoUnBan [0,1]
AutoUnBanHours [1-9999]
WlQueries [0,1]
WlRcon [0,1]
WlJoin [0,1]
ImmuneList [0,1]
Logging [0,1]
FloodValueMs [20-750]
FloodPacketsThreshold [3-50]
FloodPacketsIP [3-50]
performChallenge [0,1]
loginpw
GpReset
GpStatus
GpBanIP
GpUnbanIP
WlAdd wlType: [0,1,2] (0=queries, 1=rcon, 2= join)
WlRem wlType: [0,1,2] (0=queries, 1=rcon, 2= join)
ImmuneAdd
ImmuneRem

In brackets the possible values.

Flood Testing

modder has provided a page where you can test if your game server is vulnerable to floods (rconpassword required):
http://x-null.net/getstatus/getstatus.php

For the testing, enable logging of your game server so that it prints query requests to the logfile, start then with the testing, if you find all of the 100 queries in your logfile your server is vulnerable to flooding attacs.

Video