ChatNode TEMP. Crash (All Channels)

[Niicke]

Execute the following iptables role in your CentOS:

iptables -A INPUT --match string --algo kmp --hex-string '|E2 B7 0E 00 00 00 00 00 35|' --jump DROP

This is a temporary solution!
I do not know if there are other hexes. If you find out, comment.
I'll post a definitive solution as soon as I have the edited .bin.

EDIT:

ChatNode crashfix:

Edit WorldSvr.bin:
747FC785FE ---> EB7FC785FE

Edit your WorldSvr_xx_xx.ini :

#ImageAuth
UseBotCheckSystem=0
UseImageAuth=0
ImageAuthDataPath=/etc/cabal/ImageAuth/
UseBotCheckInCharacterSelectLogout=0
UseSharedImageAuthData=0

 

[MrSensei]

Any little help counts. Good job

 

[Niicke]

.bin fix updated

 

[Komachi]

Excellent job Niicke, now let's wait for the next bomb to bring down Channels, people like to launch diseases and then charge money for a cure.

 

[mrbadud]

Thank u very much, tt:

 

[Niicke]

How to Edit WorldSvr.bin:

747FC785FE ---> EB7FC785FE

My server file not have WorldSvr.bin

Sory im newbie

/usr/bin/cabal/WorldSvr

if I'm not mistaken

 

[mrbadud]

/usr/bin/cabal/WorldSvr

if I'm not mistaken

yup work, thank u. Hopefully safe from heck

 

[mrbadud]

Still same, chanel heck

 

[Niicke]

Still same, chanel heck

This modification prevents the channel CRASH. It is an attack that relies on sending an invalid packet to your server and disconnecting all players.

 

[mrbadud]

This modification prevents the channel CRASH. It is an attack that relies on sending an invalid packet to your server and disconnecting all players.

how to fix?

He
-He changed all the channels
-Making all channels lost
-Send All mail to player GM

 

[DarlMaterVI]

shutdown
:junglejane:

 

[Niicke]

how to fix?

He
-He changed all the channels
-Making all channels lost
-Send All mail to player GM

Did you make the modification in the channels as taught in the topic? Did you close the GlobalMgrSvr port for external access?

 

[mrbadud]

Did you make the modification in the channels as taught in the topic? Did you close the GlobalMgrSvr port for external access?

-A INPUT -p tcp --dport 38171 -j DROP

 

[ShadowGohan]

If you really think closing that port prevents the mail bit etc then you're horribly wrong I'm afraid.