Solution against Crash

[xDarkMoon]

This thread was for free. Each of us contributed something and the least you can do is be thankful for that, you can fix this with even minimal knowledge, which is something you need to maintain the server.
I was merely suggesting something to you, learn or shut down, sooner or later you'll have to. Instead of wasting your money for 'others to do it' why not learn and do it yourself?

 

[EN Omnia]

Hi

i try to figure out how i can resolve this problem but no work..

iptables -A INPUT -p tcp --dport 38111 -m string --string "e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38111 -m string --string "0000e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38111 -m string --string "0000 e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38112 -m string --string "e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38112 -m string --string "0000e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38112 -m string --string "0000 e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38113 -m string --string "e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38113 -m string --string "0000e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38113 -m string --string "0000 e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38114 -m string --string "e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38114 -m string --string "0000e2b7" --algo bm -j DROP
iptables -A INPUT -p tcp --dport 38114 -m string --string "0000 e2b7" --algo bm -j DROP

someone help please, what im wrong!

 

[Ir Zamora]

http://forum.ragezone.com/f459/globalmgr-packet-proxy-932596/ This will work ! but C# is so Complicated (Traffic) so slow connect on Server/Ports.. it would be nice and good if someone change this language or translate it to VB ( Visual Basic ) " http://forum.ragezone.com/f459/globalmgr-packet-proxy-932596/ " or C++ make it .dll and HOOK on cabalmain


Tested

 

[PunkS7yle]

C# is so Complicated (Traffic) so slow connect on Server/Ports.. it would be nice and good if someone change this language or translate it to VB ( Visual Basic )

Dafuq did u just say ?

 

[Ir Zamora]

Dafuq did u just say ?

dafuq that i say (sorry for my bad english).. i have make my own Packet Proxy using same language " C# " im trying to make it Application+.dll !.. (look at the picture).. it work 98% , 2% is your self if you we're believe .. as far you seen in the photo.. thats not fully config, but i already tested it in my local server,

 

[PunkS7yle]

1. Everything you said in your previous post is stupid.
2. There's no point in a proxy that's hooked to cabalmain, what the ****, more stupid ****.

 

[MOVEAX]

dafuq that i say (sorry for my bad english).. i have make my own Packet Proxy using same language " C# " im trying to make it Application+.dll !.. (look at the picture).. it work 98% , 2% is your self if you we're believe .. as far you seen in the photo.. thats not fully config, but i already tested it in my local server,

what? a GlobalManager Proxy on client side? what's the point?

2. There's no point in a proxy that's hooked to cabalmain, what the ****, more stupid ****.

If GlobalManager proxy is being hooked to cabalmain that is truelly pointless but if something like packet proxy/sniffer then there's a point.

 

[PunkS7yle]

If GlobalManager proxy is being hooked to cabalmain that is truelly pointless but if something like packet proxy/sniffer then there's a point.

we already have one. its called ostara

 

[estsoft]

we already have one. its called ostara

Well, the version of Ostara that's floating around atm isn't the latest one, so it's kinda broken a little. When I get my PC back, I'll upload the latest one.

 

[xDarkMoon]

Looks like I've been missing on a lot .-.

 

[x30unlimited]

Well, the version of Ostara that's floating around atm isn't the latest one, so it's kinda broken a little. When I get my PC back, I'll upload the latest one.

off: meh, i'm still usin the old one and it's workin fine, i mean the rly old one, without "listen interface" select

on: the answer is posted, it's just not spoon-fed

 

[cadena]

off: meh, i'm still usin the old one and it's workin fine, i mean the rly old one, without "listen interface" select

on: the answer is posted, it's just not spoon-fed

clear
service iptables stop
IPTABLE="/sbin/iptables"


$IPTABLE -F
$IPTABLE -Z
$IPTABLE -X


#Cabal Secure Ports
#DBAgent ,GlobalMgrSvr,AuthDBAgent,RockAndRollITS,EventDBAgent
#CashDBAgent ,PCBangDBAgent,EventMgrSvr,GlobalDBAgent,PartySvr
SecPorts="32080,38190,38181,37110,38171,38180,38170,38201,38140,32001"


#Cabal Open Ports
lPort="38101" #LoginSvr Port
cPort="38121" #ChatNode Port
aPort="38151" #AgentShop Port
#WorldSvr Ports
Port1="38111"
Port2="38112"
Port3="38113"
Port4="38114"
Port5="38115"
Port6="38116"
Port7="38117"


$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp -m multiport --dports $SecPorts -j DROP
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $lPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $cPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $aPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port1 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port2 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port3 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port4 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port5 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port6 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port7 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
service iptables save
service iptables start

 

[MOVEAX]

clear
service iptables stop
IPTABLE="/sbin/iptables"


$IPTABLE -F
$IPTABLE -Z
$IPTABLE -X


#Cabal Secure Ports
#DBAgent ,GlobalMgrSvr,AuthDBAgent,RockAndRollITS,EventDBAgent
#CashDBAgent ,PCBangDBAgent,EventMgrSvr,GlobalDBAgent,PartySvr
SecPorts="32080,38190,38181,37110,38171,38180,38170,38201,38140,32001"


#Cabal Open Ports
lPort="38101" #LoginSvr Port
cPort="38121" #ChatNode Port
aPort="38151" #AgentShop Port
#WorldSvr Ports
Port1="38111"
Port2="38112"
Port3="38113"
Port4="38114"
Port5="38115"
Port6="38116"
Port7="38117"


$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp -m multiport --dports $SecPorts -j DROP
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $lPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $cPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $aPort -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port1 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port2 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port3 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port4 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port5 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port6 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
$IPTABLE -A INPUT ! -s 127.0.0.1 -p tcp --dport $Port7 -m string --hex-string '|0000e2b7|' --algo bm -j REJECT --reject-with tcp-reset
service iptables save
service iptables start

give some proper credits

 

[PwrDex]

I think so MOVEAX = PX2000.. i got this old time ago.. Just dont know the reason of sharing but guys can be happy.. (It's just partially solution.. players get tons of DC cause this..)

 

[sotiomake]

Take this:

To view the content, you need to sign in or register

Change client version, Magic key and XOR, and relax.



BUT HAVENT LAGGEST X-TRAP!!!
But u can use teyra guard or other....

 

[Dens666]

Its just unpacked 374 main? Why u post it here?
Change client version and magic key does not make us safe...
I just wondering if i would share main like x30 do, i mean launcher -> load empty cabalmain -> cabalmain load main dll's :fanny:
it can protect probably most of hacks, but i dont know how about crash ;>
Maybe in futhure x30 gonna tell us how he figured it out.

 

[sotiomake]

On this cabalmain.exe not work channel crasher.



if lock server only for this cabalmaine.exe u have not problem with crasher tt1:

 

[Dens666]

Maybe tell us what did u change in it? When i just back to home i gonna try it.

 

[sotiomake]

I do not see any reason to convince you to use this cabalmain.exe
I saw that you are interested in the question how to protect yourself from this attack.
I gave you a solution how I see working and simple.
The difference of this exe and those that you have is that there is no anti-cheat system (X-Trap's face it, it just do not need, at least on my server with Ukrainian Russian players where every third person a cheater and gets banned. And they do this cheat is not a hindrance at all, even a child of 10 years old)))
And the main difference (for some reason does not work crasher):
Other addresses in cabalmain.exe and when crasher want add to them the values ​​it fails and nothing happens, it does not even see it.
Later i will do a detailed guide for beginners who have little understanding of how a server can fight back from my decision.)

 

[devcabal]

xor key, magickey and client version is the easiest thing in the world to discover, this is not the most appropriate solution.