"Gatewayserver" is underattack
Hello
I believe this is a DDOS attack against my server, Take a look yourself:
First i get this error from "Gatewayserver"
http://www7.0zz0.com/2013/04/23/08/778890878.jpg
Then,
"SMC" service becomes "Red" and everytime i click "start service" it becomes "Red" again in 2 seconds
http://www7.0zz0.com/2013/04/23/08/365849551.jpg
I tried to replace "Gatewayserver.exe" with another one but it didn't work
Please help, tell me what to do?
Thank you
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
UnFoRGiVeN78
its a known exploit, the fix was released here: http://forum.ragezone.com/f722/gatew...er-fix-904853/
but i just took a look and the thread opener just editted removed the fix :S
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
Isoline
I checked this thread earlier, i don't know why he removed the fix! that's why i created a new thread so that some1 may help me.
Thank you
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
UnFoRGiVeN78
I checked this thread earlier, i don't know why he removed the fix! that's why i created a new thread so that some1 may help me.
Thank you
anyway here is the fix:
open Gateway via Olly
right click search for all commands: PUSH 6308 change it to any nr you want.
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
Isoline
anyway here is the fix:
open Gateway via Olly
right click search for all commands: PUSH 6308 change it to any nr you want.
It's stopped since 5 hours, I'm going to test it in case i get attacked again.
Thank you very much <3
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
UnFoRGiVeN78
It's stopped since 5 hours, I'm going to test it in case i get attacked again.
Thank you very much <3
no problem, have fun...
Re: "Gatewayserver" is underattack
The attack is back..
I'm gonna try to apply your fix to my gatwayserver.
i got his msg:
"Hey *** .. i'll keep attacking ur game and make it Check 24/7 .. so let's make a deal when u come back .. and i hope when u read my msg u will remsg me .. if u care about ur game"
Thank you
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
UnFoRGiVeN78
The attack is back..
I'm gonna try to apply your fix to my gatwayserver.
i got his msg:
"Hey *** .. i'll keep attacking ur game and make it Check 24/7 .. so let's make a deal when u come back .. and i hope when u read my msg u will remsg me .. if u care about ur game"
Thank you
give me ur skype if u got account on it
Re: "Gatewayserver" is underattack
Use this gateway...
https://mega.co.nz/#!2tpVDCbB!LTnTIx...nzkgG-phKgvvSE
It's a GW with applied fix. Keep your original one too, because when u want to make an automatic update you will need the original gateway since the opcode that is changed in this one won't work with the original SMC.
Re: "Gatewayserver" is underattack
Just change your smc port by changing the gateway port from cert. ini files
then make sure you are only have the permissions to make moudle patch from smc not anyone else
Re: "Gatewayserver" is underattack
Quote:
Originally Posted by
NourAyman
Just change your smc port by changing the gateway port from cert. ini files
then make sure you are only have the permissions to make moudle patch from smc not anyone else
It is an exploit, getting gateway port is kinda easy with pk2 extractor... so better use the fix that I gave him I use it and I don't have any problems.
Re: "Gatewayserver" is underattack
There is another exploit too, which will (how to say properly...) disconnect gatewayserver from smc/cert. Works almost the same way as the other.
Just change 631D opcode to something else and everything should be fine :)