Players spoofing my Steam ID, demolishing server.

[Bamboosels]

Hi, I host a couple popular Unturned servers called Panda LLC, and have been having a lot of hacker problems, as you can imagine. I ban around 150 people a day, and have a few admins that ban more, but it is still not enough. Recently with sinhack coming out, my player population has dropped from around 40+ to only about 10-15. Now, to make things worse, people are somehow spoofing my steamid/name so they can log onto the server and have full admin permissions. This had led people to complain about "me" using /tpall then killing them, banning them, spawning stuff, using /god, giving players items, and overall abusing. If anyone at all knows a fix to this, I would be happy to know about it. If there isn't does anyone know a fix to this? (Fix to sinhack, steam id spoofing, etc). This has gone too far and enough is enough, and hopefully I will be able to change from 2.2.5 to 3.x.x, as soon as there is support for hosting services. Thanks.

-Bamb

[Bamboosels]

spared, this is EXACTALLY what I'm talking about! People are spoofing my steamid and my admin's to log on and abuse! Did you not read what my thread is even about?

[spared_life]

Most certainly did however I didn't mean to hijack your discussion but it did seem appropriate place to point out your excessive banning since you brought it up.

"I ban around 150 people a day, and have a few admins that ban more"

If you are saying you did not do the bans today then how does one go about getting an IP unbanned?

[wishing1]

spared_life

this is the only criteria to ban hackers.There is currently no other way to detect hackers properly other than /vanish etc. I realize its damn frustrating to be playing legitimately and be banned but its so hard to differentiate for admins/hosts. the hacks that are out there can crash the server without this harsh ban policy there would be no server to become banned from about 23 hours of every day.

I have run a 24/7 server with only 12 slots for about 3 months and can sympathize with Bamboosels. As host I've not been able to actually play for about a month now just constantly detecting hackers. I imagine a 64 slot server could be a nightmare.

Banning 150 players a day on average is a good thing for all legitimate players. There seems no other way to limit legit player casualties tho

[wishing1]

btw i think nelsons & nessin's steamID64 were included in the older version of modloader

put these into your adminpermissionslevels.ini
76561197976976379=0
76561198135766060=0

this will disable anyone spoofing ny of these ID's

[Bamboosels]

I did that a while ago, just to be sure. Back to the original topic, does anyone have a fix for people spoofing other steam id's?

[spared_life]

This has been a nice 3 way chat but again for all those casualties...

"There seems no other way to limit legit player casualties tho"

how do they get back in?

[Bamboosels]

I've been trying my best to unban anyone who got banned from one of my spoofers. I just look at what time I was "online" when I wasn't actually, and unban anyone who was banned during that time.

[spared_life]

When you are not online can you set your admin (permissions) ID to 0 or maybe spoof an admin ID so the hacker gets an illegit ID.

[spared_life]

Yea this stuff ain't easy. Lots of would be serial killers out there living their dream online and creating havok for everyone

Edit: easy, I was referring to the hackers

Originally posted by Johnyknowhow:

Originally posted by BambooselsI ban around 150 people a day[/quote:

Holy crap.

[wishing1]

removing ur ID from permissions when u are offline should work as temp fix :/

[Bamboosels]

Good idea, but I don't really want to go through the trouble every time i log on or off, but I guess for now it's ok. Not sure why I didn't think of that before.

[spared_life]

Maybe someone can write a frontend to auto permission you admins by checking your login status.

[Bamboosels]

Yeah, and kick the player if they don't have our real IP. I'll see if I can get someone to do that.

[Hammereditor]

For those of you who do not know, I am the creator of the HammerHost hosting service, which Bamboosels currently uses for his gold server.
+ Quote from Nelson Sexton: ------------------------------------------------------ +
| What sort of things do you need to allow support for hosting services? |
+ ------------------------------------------------------------------------------------------- +

Back when we talked, I thought it was possible to run a version 3 hosting service (and therefore happy), until I found out that it was impossible because of data saving. The only way to save data right now is to enter the "Shutdown" command into the dedicated server's console. Of course, this will work for individual players with their own VPS, but accessing the dedicated server console will not work for hosting services. Therefore, when the server gets stopped, progress is lost, and nobody would want to use a hosting service. Here is a list of features which would help hosting services:

• Remote UDP admin command system (we talked about this)
• Chat-based admin commands (upcoming feature)
• Auto-saving every few minutes (very easy to implement)

Until at least ONE of these features is added, it is impossible for hosting services to host 3.x.x.x servers. Having some way to save the data without using the server console is absolutely critical. One of my beta testers, Bamboosels, has had to deal with Steam ID spoofing, Sinhacking, and other nusiances because 3.x.x.x is not compatible with hosting services.

Even though there are some problems with dedicated servers, I'd like to announce that I am pleased with the version 3 progress. The stupid memory leak from 2.2.5 has finally been solved for good. 3.x.x.x servers appear to use far less network than 2.2.5 servers. 3.x.x.x servers appear to use less RAM. Even better, dedicated servers do not crash every 3-5 hours.

[BigGunzPewPew]

Dude! i totally feel your pain. I host @ unturnt.com servers 3 big ones. I had to hire a huge staff of admins which I dont fully trust to ban players when im away, and I still do most of the work and have no time off. NOCHEAT mod has cut the work in half. IDK why you cant find nocheat anymore but it is wayyyy better than k-anticheat or what ever garbage you find now. if you need nocheat ill give it to you.

Recently they started joining my servers with completely spoofed ID's... I use the misceleneous mod which tells you everyones IP and STEAMID and some players have no IP, no ID, nothing to ban. If we could get the creator of the game to prevent this, that would be a required add to the game.

Good luck with these guys. I ban 10+ a day so it seems you got worse of a problem. Thanks for the game nelson but theres some things you really could have put some more work into. :'(