Securing Your Server * 1x Game Server *

[Jangan]

Summary:
Alright, i know i haven't been around here releasing lately, been very distracted and have been resenting the ragezone community, sorry i am back now and i will be writing some seriously amazing guides here! Noob friendly guides and other things too!


Objective
* We going to be managing the TCP connections and blocking the following ports -> 32000, 15880, 15882, 15885, 15883, 8080, 1433, 3306 <-
* Set mssql to local
* Set odbc to local

Result
Secures your ports
Secures your connections

Difficulty
Hard

-----------------------------------------------------------
- Alright, lets get started with the guide -
-----------------------------------------------------------

Step 1) Fire walls, knowing and understanding the firewall!

- So this guide is actually built for Windows RC2 but you can still probably get the same idea working on windows or linux or mac or whatever the hell you use to run your server on! IF you are running your website on 8080, then dont block 8080, else block 8080.

• Step 1a) Turn on your windows firewall

• Step 1b) Run mmc.exe [Windows Firewall with advanced security]
  
  • Click on New Rule
  • Choose Protocols and Ports
    
    • Click Next
    
    
  • Click TCP
  • Click Specific Local Ports
  • Type 15880, 15882, 15885, 15883, 32000, 8080, 1433, 3306
    
    • Click Next
    
    
  • Block the Connection
    
    • Click Next
    • Click Next again
    
    
  • Put a Name and description
    
    • Click Finish
    
    
  
  

So now we pretty much closed down all the ports that are open to public, you can verify this by using an online port scanner! Online Port Scan | Port Scanning | Port Scanner | Port Checker verify that all these ports are closed! You dont ever need a reason to have them open in the first place


Step 2) Making your SQL Connection Local

- This will pretty much make your remote connection local, so if anyone knows your database username/password you will never be hacked because they cant do shit with it anyways!! Because your sql/port are all local host!
THIS IS ONLY FOR 2005 EXPRESS NOT 2008 RC2

• Step 1) Run SqlSAC.exe [SQL Server 2005 Surface Area Configuration]
  
  • Click on Surface Area Configuration for services and conenctions
  • Click on Remote Connections
  • Click Local Connection Only
    
    • Click ok
    
    
  
  

Step 3) Making your ODBC Connection Local

- This will make your ODBC connection local, so there are methods where it was easy to just open your certificate and get the connection information of your odbc/sql data but this should help fix that!

• Step 1) Run odbcad32.exe [ODBC Data Source Administrator]
• Step 2) Notice how all these guides make you add information in the System DNS, well instead of that, add it to User DNS. Read the description under both and you might understand why!

[MentaL]

[AmRoSy]

Thanks bro , appreciate your work

[FuriousRage]

Respect to you my man!

Question: The registration page I set up for the server, isn't working anymore, won't connect to the Database.. any ideas to fix this?

Bump :(

Never mind, found out why, forgot to add a letter to the pw.

[Murgy]

Great. but I have to enable 15779 to start the game, but still cant actually login.

[Jangan]

Great. but I have to enable 15779 to start the game, but still cant actually login.

Sometimes Windows firewall will just block all ports, in that case.

• Run mmc.exe [Windows Firewall with advanced security]
  
  • Click on New Rule
  • Choose Protocols and Ports
    
    • Click Next
    
    
  • Click TCP
  • Click Specific Local Ports
  • Type 15779
    
    • Click Next
    
    
  • Allow the Connection
    
    • Click Next
    • Click Next again
    
    
  • Put a Name and description
    
    • Click Finish
    
    
  
  

Then that port is open to everyone and everything! Any other problems, reply here!

[Murgy]

Yeah I already did that ^^ but it gives me C9 error now

[FuriousRage]

Jangan,

my server was hacked, but now whenever I register a new test account... theres a character on it? It's like wtf.. no matter what id/pw i type theres a char on it?? :S

[Murgy]

Jangan,

my server was hacked, but now whenever I register a new rest account... theres a character on it? It's like wtf.. no matter what id/pw i type theres a char on it?? :S

If you don't want the old characters do this

USE SRO_VT_SHARD
TRUNCATE TABLE _User

[FuriousRage]

If you don't want the old characters do this

Well I do want to use the old characters, thats in my backed up DB already.. but these characters.. are from users who created them in between my back up and till it got hacked :S (i guess?)

[Jangan]

About your C9 error, hmm make sure you add all the .exe files that needs to be ran to firewall!

1) Run FireWallControlPanel.exe [Windows Firewall - From Control Panel]
2) Click Allow a program through windows firewall
3) Click Add Program
4) add all files like agent/gameserver/smc/ etc etc..

That should fix it! Anything else respond here!

If you don't want the old characters do this

Jangan,

my server was hacked, but now whenever I register a new test account... theres a character on it? It's like wtf.. no matter what id/pw i type theres a char on it?? :S

IF you got hacked, either restore older backups or just reset your databases :S
also, if you follow this guide, you wont get hacked. Unless its website inject, and i cannot block that!

[Murgy]

Edit: Fixed my self. :) Thank you very much jangan.

[Jangan]

Edit: Fixed my self. :) Thank you very much jangan.

Good luck with your server.

[SL1MSH4DY]

Thanks Jangan! "Liked!"

[hectormousa]

thanks man nice work

[sladlejrhfpq]

I did every steps, and my server still got hacked. my MSSQL has been set to local, all ODBC resources are User DSN now, and i added to windows firewall with advanced security the ports you wrote: 15880, 15882, 15885, 15883, 19980, 8080, 1433, 3306, and 32000.

mmc.exe is console root for me, maybe i misunderstood something.
Please help me.