Server connecting to 203.238.185.140:28888

[Shanira]

While fiddling around trying to figure out what ports to forward to make Audition server connectable by my friends on the net, I noticed something very interesting. Every time the server starts it connects to:

203.238.185.140 port 28888

Now, considering that's some IP in Seoul it sure isn't me, and I'm left wondering why a server would need to connect to an external thing and then have a busy little chat with it. (which I sniffed using Wireshark)

Anyone know more about this? Sounds like a big security hole if you ask me, I'm certainly not running this thing again til I can figure it out. :P

[MentaL]

[HTML]

Yes! I already known about it! U can change this port to 127.0.0.1 and use a port listening program what can be sent by this program!

Here is some infomation:

[Shanira]

Well I did redirect the IP to 127.0.0.1, which made it not work. Then I created a quicky program that listens on the port it connects to, but does nothing with the data. That didn't work either: server still won't start.

So basically this is a remote desktop type program? And all I have to set up is a remote desktop type service locally for it to connect to?

Hmm, thanks. :)

[username1]

LOL HTML, go hax their box~!

Too bad the "shut down" button was greyed out

[nguyenhuy]

@user1 :lozl !! :|

[HTML]

@username1: a good ideal! :)
@Shanira: I found hex data was sent from gameserverau, but it maybe encrypt. If u want to do that, make a program to listen the port 28888,

In C#, this code may be similar to:

TCPListenner l = new ....(28888)
l.start();
l.server.listen();....
....

Then open gameserverAu, open Commview (a packet monitoring program), then u can see what can be sent to 127.0.0.1:28888.

Maybe i will decode it after i finish 2.0 server.

(Oh! I've just found out how to encrypt and decrypt the packet data from client 2.0 to gatewayserver, that's very interesting ---> google it: "Rijndael" but only one side uses this encrypt algothym :))