ServerSecure (Files only) - Server protection against the Upload / Download exploit.

[asherkin]

IT DON'T BLOODY WORK MAN! YE MUST ABANDON SHIP AND STOP USING THIS THING. :grrr: YARR.

This extension is long broken and unsupported, please do not post about it not working.

--------------------

What Does It Do?
Stops people downloading or uploading unauthorized files to your gameserver

What Doesn't It Do?
Anything else.

How Do I Get It?
Click here (http://hg.limetech.org/sm-ext-dev/serversecure_files/raw-file/tip/release.zip).

How Do I Install It?
Drop the folders in the archive in the addons/sourcemod folder.

What engines are supported?

Orange Box Valve (Source 2009).


Why does this exist?
Some people won't use the full ServerSecure VSP due to the cosmetic ping time increase, this is also missing from the Linux version of ServerSecure and D-FENS has been proven to be bypassed.

Who do I thank for this?
The method is directly from ServerSecure and was writen by AzuiSleet. All I have done is split out the code and converted it to use a different Detours lib that is cross-platform.

Where Is The Source Code?
Here (http://hg.limetech.org/sm-ext-dev/serversecure_files/file/tip).

[matrixmark]

so err does this work for Left for dead on a LINUX server?

Sorry I dont get all this OB (orange box) stuff so i'm not sure :p

Thanks

Mark

[asherkin]

Not currently.
Orange Box Valve (Source 2009) is TF2, CS:S, DoD:S, HL2:DM and GMod.

[matrixmark]

aww thats a shame, was just going to try and load it :p

meh, thanks anyways for your reply.

Mark

[KyleS]

Awesome! :wink:

[bobbobagan]

Does this one allow sprays?

[KyleS]

Does this one allow sprays? Allows all legitimate files. :wink:

[tigerox]

Would this allow someone to upload a file with the same name as a vaild downloadable file, or are file overwrites not exploitable?

Example. Overwriting map files in the /maps folder.

[bobbobagan]

Any conflicts, such as running DAF or Drunken F00l's anti-ddos at the same time?

[asherkin]

Only with D-FENS (and ServerSecure if on Windows).

[Atreus]

Awesome! Thanks asher :3

[tigerox]

Would this allow someone to upload a file with the same name as a vaild downloadable file, or are file overwrites not exploitable?

Example. Overwriting map files in the /maps folder.

Does anyone have an answer to this question? Asked a while ago with no reply.

Thanks.

[asherkin]

As far as I know, Valve actually succeeded in patching the uploading portion of the exploit, they just left holes in the download filter.

EDIT: <@AzuiSleet> you can't overwrite files except by converting them to directories (which isn't possible with the fix)

[tigerox]

As far as I know, Valve actually succeeded in patching the uploading portion of the exploit, they just left holes in the download filter.

Great. Thanks for the reply.

[sinblaster]

Only with D-FENS (and ServerSecure if on Windows).


I appologise in advance asherkin but I am lost with this mate. I am running Windows Server / mmsource-1.8.4 / sourcemod-1.3.6

I also have D-fens. I should uninstall D-fens if I want to use this?

[KyleS]

I should uninstall D-fens if I want to use this? You should remove D-Fens if you want to use this.

[sinblaster]

Thanks kyle its just when it mentioned (and ServerSecure if on Windows) and the name of this extension being "ServerSecure" I got lost.

Really appreciate your help.

[Xaphan]

I was using D-FENS until last night...
yes servers all updated to current version, this must be new exploit on win servers only.
L 04/13/2011 - 23:09:09: [D-FENS] "<><STEAM_0:1:26233280><IP>" uploaded file "maps/cs_office.bsp\hacked.txt".

I removed D-FENS and install this extension.

Question is: Will this extension log actions?

[asherkin]

This extension has been updated for todays update.

Question is: Will this extension log actions?

Yes.

[tigerox]

This extension has been updated for todays update.

Could you please post the updated files.

Thanks.

[asherkin]

It's the download link from the first post.

[tigerox]

It's the download link from the first post.

Seems to still be the old files, using the release.zip link on the front page.

[asherkin]

Seems to still be the old files, using the release.zip link on the front page.

Sorry, forgot to push the update files to the server. Was in a bit of a rush.
Should be fine now.

[tigerox]

Thanks for the update.

Loads now, but with errors. Running linux and latest stable snapshots. CSS.

08:49:43 L 04/15/2011 - 08:50:28: [SERVSEC] Could not locate IsValidFileForTransfer - Disabling detour
08:49:43 [SM] Extension serversecure_files.ext.so failed to load: Couldn't find IsValidFileForTransfer function!

Gamedata needs a change. I changed 'tf' to '#default' and all working now.

Thanks again!

[asherkin]

That is not a good sign (for this plugin), it could mean Valve have fixed the issue though.
I'll look into it and let you guys know.

[dataviruset]

That is not a good sign (for this plugin), it could mean Valve have fixed the issue though.
I'll look into it and let you guys know.

It would be cool if they fixed it.
Thanks for letting us now :)

[Seta00]

This is working fine for me with the latest SM and MMS dev snapshots in TF2 (Linux).

[PharaohsPaw]

Thanks for the update.

Loads now, but with errors. Running linux and latest stable snapshots. CSS.

08:49:43 L 04/15/2011 - 08:50:28: [SERVSEC] Could not locate IsValidFileForTransfer - Disabling detour
08:49:43 [SM] Extension serversecure_files.ext.so failed to load: Couldn't find IsValidFileForTransfer function!Gamedata needs a change. I changed 'tf' to '#default' and all working now.

Thanks again!

ditto, exactly the same here with our linux CS:S servers:

[03] <FAILED> file "serversecure_files.ext.2.ep2v.so": Couldn't find IsValidFileForTransfer function!Changed 'tf' to '#default' in the gamedata file and now the extension will load and appears happy:

[03] Server Secure - Files Only (1.0.0): The finest defenceThis is with the release.zip from first post, downloaded today (4/15).

In case its important here's our SM and MM:S version info:

sm version
SourceMod Version Information:
SourceMod Version: 1.4.0-dev
SourcePawn Engine: SourcePawn 1.1, jit-x86 (build 1.4.0-dev)
SourcePawn API: v1 = 4, v2 = 3
Compiled on: Apr 14 2011 17:14:09
Build ID: 3254:45f2ca7eb3f9-dev
http://www.sourcemod.net/

meta version
Metamod:Source version 1.9.0-dev
Build ID: 746:024416402896-dev
Loaded As: Valve Server Plugin
Compiled on: Apr 14 2011
Plugin interface version: 15:14
SourceHook version: 5:5
http://www.metamodsource.net/Thanks for the update!

[asherkin]

Changed 'tf' to '#default' in the gamedata file and now the extension will load and appears happy

Oh derp, that totally wasn't meant to get pushed.
Nice catch, sorry guys.

[FR3AK]

When do you update this extension?

[asherkin]

When do you update this extension?

29 hours ago.

[FR3AK]

thanks. the extension works on my updated server very well.

[biship]

L 04/20/2011 - 09:04:26: [SM] Unable to load extension "serversecure_files.ext": /left4dead2/addons/sourcemod/extensions/serversecure_files.ext.so: cannot open shared object file: No such file or directory
I do however see a I do however see a serversecure_files.ext.2.ep2v
Linux server.

[Visual77]

L 04/20/2011 - 09:04:26: [SM] Unable to load extension "serversecure_files.ext": /left4dead2/addons/sourcemod/extensions/serversecure_files.ext.so: cannot open shared object file: No such file or directory
I do however see a I do however see a serversecure_files.ext.2.ep2v
Linux server.


What engines are supported?

Orange Box Valve (Source 2009).

[Bubka3]

Is this plugin still useful? I saw somewhere stating that Valve might of fixed it.

[dataviruset]

Is this plugin still useful? I saw somewhere stating that Valve might of fixed it.

They fixed it partially, but it was exploited again in no time. That was the last thing I heard, but I don't think it's fully fixed yet, actually.

[KyleS]

Is this plugin still useful? I saw somewhere stating that Valve might of fixed it.
You can still upload and download files with ease.

[Drixevel]

I'm NOT going to install this onto my server until a fix. Also, can there be a version for L4D(2) or is that a silly idea?

[asherkin]

I'm NOT going to install this onto my server until a fix.
A fix for what?
Also, can there be a version for L4D(2) or is that a silly idea?
No, L4D(2) uses a much older version of the file filtering code than this extension is designed to work with.

[GoD-Tony]

Looks like this exploit is still being used. (http://www.kigenac.com/viewtopic.php?f=5&t=1110) I should get this running on my server, thanks!

[Drixevel]

You can still upload and download files with ease.

Then again, i did pull that out of my ass so i might be wrong and there is no problem. I'm tired right now so it's not exactly a good combo.

[asherkin]

Kyle was commenting on Valve's "fix", not this plugin.

[KyleS]

I'm NOT going to install this onto my server until a fix.
If you're waiting for Valve to fix this, they're not going to. Whomever seems to be handling it internally is obviously unable to comprehend the situation at hand. Someone seems to think blacklisting file extensions is going to get the job done, this is just stupid.

I've been unable to overwrite files while this extension is active.

[Drixevel]

From what I've heard, valve hasn't really fixed much have they. I mean they have fixed enough but not enough like most people want. :P

[WebNoob]

For some reason, ever since installing this (to replace DFENS), every now and then a user will join a full TF2 server, and the entire server's ping will shoot up into to 500-900 range (all accept for the last person who logged on - who's ping looks normal).

Kicking the one person who's ping is normal always seems to fix the issue - IF we're not so lagged out we can't bring up the admin menu.

Any suggestions as to what could be causing this?

[DarthNinja]

WebNoob: I've had that happen too.

[WebNoob]

OK...here's something interesting.....

We've had this happening several times per day across multiple TF2 servers. As opposed to kicking, we started banning the players causing it - in hopes of getting them to come to our forums so we could see what they were doing at the time.

Lo an behold...each and every one of them is running the Mac client. SO....I think there may be something about the Mac client causing these issues. Each one of these people said they had suffered a crash when they joined.

[bluechester]

For some reason, ever since installing this (to replace DFENS), every now and then a user will join a full TF2 server, and the entire server's ping will shoot up into to 500-900 range (all accept for the last person who logged on - who's ping looks normal).

Kicking the one person who's ping is normal always seems to fix the issue - IF we're not so lagged out we can't bring up the admin menu.

Any suggestions as to what could be causing this?

Is this still happening?

[KyleS]

Is this still happening?
It's still happening to me on CS:S. I'm not sure this is related to ServerSecure (Files), though.

[bluechester]

Can anyone else confirm whether this is still happening or not on their servers?

[GoD-Tony]

Lo an behold...each and every one of them is running the Mac client. SO....I think there may be something about the Mac client causing these issues. Each one of these people said they had suffered a crash when they joined.What are the full steps to reproduce this? I don't think I've seen it happen before, and I have a few regulars that use the Mac client.

[Blastermaster]

meta list seems to be working

Server Secure - Files Only (1.0.0) by AzuiSleet (mod by asherkin)

[POLICEMATRIX]

OK noob question maybe but does this work for l4d2 ?

[Powerlord]

OK noob question maybe but does this work for l4d2 ?
No, only for games that use the Source 2009 engine. Valve's Source 2009 games are: Half-Life 2: Deathmatch, Day of Defeat: Source, Counter-Strike: Source, and Team Fortress 2.

[PharaohsPaw]

Hi everyone,

anybody else getting an error like this trying to load this extension:

(this is from 'sm exts list' output, pretty much same error outputs in game console etc when server is starting up):

[03] <FAILED> file "serversecure_files.ext.2.ep2v.so": /tf2/orangebox/tf/addons/sourcemod1/extensions/serversecure_files.ext.2.ep2v.so: undefined symbol: _Unwind_Resume

x86_64 Linux server - I've tried to make sure I have libgcc, libstdc++, etc. packages for 32-bit installed but I'm still getting this.

Have been out of the server loop for a while, trying to get back going again. I could be doing something stupid, or there could be something missing from the Fedora 16 x86/i686/i386 gcc packages, etc. But I did get the same error in a couple other older extensions that went away when I got a newer version (like sdkhooks). I just don't see a newer version of this, and not sure if I have everything I need to try to compile the extension myself. (SDK? etc.)

thanks
PharaohsPaw

[PharaohsPaw]

I'm assuming this extension is still needed (the vulnerability still exists?)

[TheAvengers2]

I'm assuming this extension is still needed (the vulnerability still exists?)Apparently.

http://forums.alliedmods.net/showthread.php?t=174178

[Zephyrus]

file deletion by overwriting them with directories still work, so yes, its needed

[PharaohsPaw]

bummer. I figured as much.

Unfortunately I can't load this extension due to the _Unwind_Resume unresolved symbol problem. I suspect if it was recompiled against $thisdistro's libs it would probably work.

Guess I need to try to get ahold of the SDK and roll up my sleeves etc.

I saw some wiki stuff about compiling extensions.

Thanks

[asherkin]

bummer. I figured as much.

Unfortunately I can't load this extension due to the _Unwind_Resume unresolved symbol problem. I suspect if it was recompiled against $thisdistro's libs it would probably work.

Guess I need to try to get ahold of the SDK and roll up my sleeves etc.

I saw some wiki stuff about compiling extensions.

Thanks

I'm going to be doing recompiled builds very soon, I'm currently working on an improved version which'll include some good news later on.

[PharaohsPaw]

Thanks asherkin - appreciate your dedication!

recompiling the extension worked for me, it's loading up nice again. :)

[PharaohsPaw]

now to deal with whatever is causing mass drop of all players on the server connected to the internet side of the server (I suspect another exploit).

already running SMAC including client protection, forlix_floodcheck, smac_antispam_connect raised up, etc. and some iptables stuff out on the firewall.

[asherkin]

Make sure you have the Connect extension installed along with the SMAC module.
It's only an optional requirement but it won't provide protection against that exploit without it :3

[minimoney1]

I don't know what's wrong but the server crashes when someone tries to join.
I'm guessing this is a gamedata problem but the other problem is that my sourcemod doesn't auto-update gamedata files. (Well not all, for it does update the SDKHooks gamedatas but it didn't update the Connect gamedata -- had to manually update the gamedata -- and now it doesn't update this one; I would manually update it if I could find it for this extension but I can't, unfortunately.

[asherkin]

I don't know what's wrong but the server crashes when someone tries to join.
It's not being caused by this extension, double check the Connect gamedata.

and now it doesn't update this one; I would manually update it if I could find it for this extension but I can't, unfortunately.
This extension's gamedata doesn't autoupdate, primarily because it's never changed since limited 3rd party gamedata support was added to the gamedata updater.

[Topma4]

Hello, i have install it, and i got this.
Listing 7 plugins:
[01] Mani Admin Plugin (1.2.22.8 SMM) by Mani
[02] <ERROR>
[03] SourceMod (1.4.1-dev) by AlliedModders LLC
[04] Server Secure - Files Only (1.0.0) by AzuiSleet (mod by asherkin)
[05] CS:S Tools (1.4.1-dev) by AlliedModders LLC
[06] SDK Tools (1.4.1-dev) by AlliedModders LLC
[07] SDK Hooks (2.1.0) by Tsunami, psychonic

[checkster]

Hello, i have install it, and i got this.

sm list exts

what you show there is meta list.

[Xaphan]

We are getting random freezes on change level, when the map reloads it just randomly halts, with no errors.
I talked with a developer of Fire Daemon, because the server wasn't being auto-started on freeze.
Unfortunately FD still sees SRCDS as running, when its clearly froze.

Sometimes this happens 3 times a day, Sometimes once a week.
Maybe a coincident?

Last few lines before this random freeze.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
Downloading file 'downloads/76a4a09f.dat' from client PLAYERNAME_Removed failed.Also no plug-ins have been altered, or any new ones installed. With the minor server/plugins updates this server has been running for years.
Also, The downloads folder is cleaned every few weeks.

[Powerlord]

We are getting random freezes on change level, when the map reloads it just randomly halts, with no errors.
I talked with a developer of Fire Daemon, because the server wasn't being auto-started on freeze.
Unfortunately FD still sees SRCDS as running, when its clearly froze.

Sometimes this happens 3 times a day, Sometimes once a week.
Maybe a coincident?

Last few lines before this random freeze.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
CreateFragmentsFromFile: 'downloads/76a4a09f.dat' doesn't exist.
Downloading file 'downloads/76a4a09f.dat' from client PLAYERNAME_Removed failed.Also no plug-ins have been altered, or any new ones installed. With the minor server/plugins updates this server has been running for years.
My understanding is that these errors messages are generated when a player tries to spray a spray that hasn't yet been uploaded by their client.

Having said that, I've never seen a freeze related to it before.

[Xaphan]

I agree, but I had to ask. very difficult to track down this freeze.
No minidumps, no sourcemod error in logs.
No pop-up errors either, even ran in session0 without -nocrashdialog.

Thanks Powerlord, I'll keep trying to find the reason of this random halt.

[asherkin]

I don't see how this has anything to do with ServerSecure, does it not happen if it's removed?
If there is nothing to link it to SS, I'll move these posts off to a new thread in the SRCDS section for you.

You could install a debugger on the server, and when you notice a frozen process attach it and create a minidump.

[Bacardi]

Downloading file 'downloads/76a4a09f.dat' from client PLAYERNAME_Removed failed.

Warning comes when player have disabled...
"cl_allowupload" = "0" ( def. "1" )
archive
- Client uploads customization files


normal

[Jill]

This works perfectly, thanks asherkin!
L 03/30/2012 - 15:48:12: [SERVSEC] Blocking download: addons\metamod.vdf\hello.txt
L 03/30/2012 - 15:48:12: [SERVSEC] Blocking download: addons\sourcemod\configs\admins.cfg\hello.txt
L 03/30/2012 - 15:48:12: [SERVSEC] Blocking download: addons\sourcemod\configs\admins_simple.ini\he llo.txt
L 03/30/2012 - 15:48:12: [SERVSEC] Blocking download: addons\sourcemod\plugins\basechat.smx\hello.t xt
L 03/30/2012 - 15:48:13: [SERVSEC] Blocking download: addons\sourcemod\plugins\basecomm.smx\hello.t xt
L 03/30/2012 - 15:48:13: [SERVSEC] Blocking download: cfg\sourcemod\sourcemod.cfg\hello.txt
L 03/30/2012 - 15:48:13: [SERVSEC] Blocking download: cfg\server.cfg\hello.txt
L 03/30/2012 - 15:48:13: [SERVSEC] Blocking download: addons\metamod\sourcemod.vdf\hello.txt
L 03/30/2012 - 15:48:13: [SERVSEC] Blocking download: addons\metamod\bin\server.dll\hello.txt

[Bacardi]

This works perfectly, thanks asherkin!
Will that anyhow show who try upload files or which IP ?? :?
*edit
Not event #userid ... :P

[NaRyan]

Getting this after todays Source Engine update (http://store.steampowered.com/news/7759/) on my Garry's Mod server.


L 04/18/2012 - 01:55:32: SourceMod error session started
L 04/18/2012 - 01:55:32: Info (map "ch_tazmily_b1") (file "errors_20120418.log")
L 04/18/2012 - 01:55:32: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 04/18/2012 - 01:55:32: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

[prom3th3an]

Getting this after todays Source Engine update (http://store.steampowered.com/news/7759/) on my Garry's Mod server.

[03] <FAILED> file "serversecure_files.ext.2.ep2v.dll": Couldn't find IsValidFileForTransfer function!

Getting this on TF2 Also.

[dataviruset]

[03] <FAILED> file "serversecure_files.ext.2.ep2v.dll": Couldn't find IsValidFileForTransfer function!

Getting this on TF2 Also.

It works for me on Linux, so I guess it's a problem with the Windows version.

[Bacardi]

No update and no errors in Cs:s (windows)

[DontWannaName]

Where is the log file kept? Has anyone explained to Valve how to repro this exploit in its current form?

[asherkin]

Where is the log file kept? Has anyone explained to Valve how to repro this exploit in its current form?

Valve don't consider it an issue, and have refused to fix it.

The gamedata will be updated later on today.

[NaRyan]

Any idea when the gamedata will be updated?

Sorry for asking, but after having a server get wrecked with the exploit, I'm a bit paranoid without it working.

[asherkin]

Any idea when the gamedata will be updated?

Sorry for asking, but after having a server get wrecked with the exploit, I'm a bit paranoid without it working.

Updated gamedata is now in the package and on the SourceMod gamedata updater.
Sorry for the delay.

[NaRyan]

Updated gamedata is now in the package and on the SourceMod gamedata updater.
Sorry for the delay.

Thank you.
:bacon!:

[Bacardi]

Now, serversecure not work anymore on Cs:s (windows) after gamedata file update. :?

L 04/19/2012 - 06:15:43: SourceMod error session started
L 04/19/2012 - 06:15:43: Info (map "cs_office") (file "errors_20120419.log")
L 04/19/2012 - 06:15:43: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 04/19/2012 - 06:15:43: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

"windows" "\x56\x8B\x74\x24\x08\x85\xF6\x74\x12\x80"

[bobbobagan]

Can confirm that the Windows version is not working on CS:S after the gamedata update yesterday.

[03] <FAILED> file "serversecure_files.ext.2.ep2v.dll": Couldn't find IsValidFileForTransfer function!

[Bacardi]

...you could for temporary set old signature in gamedata file and set file "Read only" to prevent update overwrite file.
not recommended tough

[asherkin]

...you could for temporary set old signature in gamedata file and set file "Read only" to prevent update overwrite file.
not recommended tough

That is not how you prevent gamedata from being updated. Create a folder called "custom" in the same directory and put the edited gamedata file in there and they'll be preferred over the normal ones.

However, fixed gamedata will be on the updater as soon as I've eaten dinner.

[bobbobagan]

Just wondering if this was ever updated for CS:S? The SVN still has the wrong gamedata.

[-=Leb=-]

Hi asherkin, any news about the update. Still getting this on my windows servers


L 04/23/2012 - 06:09:04: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 04/23/2012 - 06:09:04: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!
thx in advance

Note: it started working after i replaced the new gamedata with the old one

[mad_hamster]

My windows servers just got attacked with an upload exploit (I has D-FENS installed). Since both this plugin and D-FENS seem unmaintained (at least for windows), is there any alternative out there?

Thanks!

[asherkin]

My windows servers just got attacked with an upload exploit (I has D-FENS installed). Since both this plugin and D-FENS seem unmaintained (at least for windows), is there any alternative out there?

Thanks!

This extension is still maintained, and works fine on the engine it's advertised to.

[mad_hamster]

My mistake, sorry. I attempted to load the extension on a live server and it failed with "Sigscan for IsValidFileForTransfer failed" as someone else reported here. A full restart seems to have solved the problem. Thank you for this extension. It is a life-saver!

[Fearts]

Thanks for the quick update on this ext.

[Bacardi]

Thanks for the quick update on this ext.

[checkster]

I cant make this work on my lfd2 server, I've updated gamedata files with latest snapshot, naturally stopped the server as I uploaded the files. made sure its the correct version ( os wise ).
Still says could not load module.

Any one have any ideas, or need more info ? please let me know.

[Powerlord]

I cant make this work on my lfd2 server, I've updated gamedata files with latest snapshot, naturally stopped the server as I uploaded the files. made sure its the correct version ( os wise ).
Still says could not load module.

Any one have any ideas, or need more info ? please let me know.

As it says in the first post:

What engines are supported?

Orange Box Valve (Source 2009).



That would be HL2: DeathMatch, Day of Defeat: Source, Counter-Strike: Source, and Team Fortress 2.

[DoPe^]

hello, i just think we experienced this problem...alot of hacked.txt files got uploaded to our gameserver.. and folders was renamed..

Guess this ext will fix it for happening again.
Just got one question..
Will this only work on stuff that has something to do with sm?
Or will it also work for the rest of the gameserver? Eventscript and stuff


Thank

[asherkin]

Just got one question..
Will this only work on stuff that has something to do with sm?
Or will it also work for the rest of the gameserver? Eventscript and stuff

It'll cover everything.

[DoPe^]

It'll cover everything.

okay thanks mate

[DoPe^]

hmm im just getting <FAILED> file "serversecure_files.ext.2.ep2v.dll": Couldn't find IsValidFileForTransfer function! does the gamedata file need to be updated?


Edit: well it seems to have loaded now :p

[s.m.a.c head]

As it says in the first post:



That would be HL2: DeathMatch, Day of Defeat: Source, Counter-Strike: Source, and Team Fortress 2.

is there any way to make this work for l4d2 or another plugin that does the same ?

[-=Leb=-]

getting this error after today's update

L 08/22/2012 - 19:23:15: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 08/22/2012 - 19:23:15: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

[Powerlord]

is not loading anymore after today's update

Sounds like it needs a GameData update... we should bug Asherkin about it.

[DoPe^]

getting this error after today's update

try restarting the server or change map, i had the same issue, it loaded after that

[asherkin]

Sounds like it needs a GameData update... we should bug Asherkin about it.

You bloody well shouldn't.

CS:S synced with 2009, and it was working on 2009 just fine, so it's not going to be broken on CS:S now.

Of course, I'm assuming CS:S is the issue, since the post doesn't even have the courtesy to include game and platform - assuming I'll just reach into his mind and pull the fucking info out.

Anyway, the issue is probably that SOMEBODY had the good idea to grab a recent 1.5 snapshot, which treats CS:S as a separate engine - and so the ep2v clause in the gamedata no longer matches.

[-=Leb=-]

now, it seems like its working again. im not getting error log anymore.

[DoPe^]

now, it seems like its working again. im not getting error log anymore.

like i said :p

[TheAvengers2]

Anyway, the issue is probably that SOMEBODY had the good idea to grab a recent 1.5 snapshot, which treats CS:S as a separate engine - and so the ep2v clause in the gamedata no longer matches.Speaking of that... I recompiled ServerSecure and changed the gamedata, however, the autoupdater keeps overwriting my gamedata file. Any chance of you updating the gamedata file on the updater?

[GoD-Tony]

the autoupdater keeps overwriting my gamedata file. Any chance of you updating the gamedata file on the updater?Always use the "gamedata/custom" directory when making changes that the Updater could overwrite.

http://wiki.alliedmods.net/Gamedata_Updating_%28SourceMod%29#Custom_File s

Edit: Apparently that wouldn't work in this case. Only if the gamedata makes use of a master config, like SDK Tools.

[asherkin]

Speaking of that... I recompiled ServerSecure and changed the gamedata, however, the autoupdater keeps overwriting my gamedata file. Any chance of you updating the gamedata file on the updater?

I'll add CS:S support properly when I get some time.

[TheAvengers2]

Edit: Apparently that wouldn't work in this case. Only if the gamedata makes use of a master config, like SDK Tools.The read-only idea worked. My logs won't be happy though. :wink:

I'll add CS:S support properly when I get some time.Alright. :)

[pubhero]

This extension don't work after the last (1.0.0.73) update.

Latest metamod snapshot
Latest sm snapshot

In the log:

L 08/24/2012 - 18:23:34: [SM] Unable to load extension "serversecure_files.ext": /home/rent/users/xxxxx/27xxx/css/cstrike/addons/sourcemod/extensions/serversecure_files.ext.so: cannot open shared object file: No such file or directory

Game: CSS OB
Linux server
Legit server ofc.

[asherkin]

This extension don't work after the last (1.0.0.73) update.

Latest metamod snapshot
Latest sm snapshot

In the log:

L 08/24/2012 - 18:23:34: [SM] Unable to load extension "serversecure_files.ext": /home/rent/users/xxxxx/27xxx/css/cstrike/addons/sourcemod/extensions/serversecure_files.ext.so: cannot open shared object file: No such file or directory

Game: CSS OB
Linux server
Legit server ofc.

It doesn't support the CS:S engine currently.

[pubhero]

Huh. Thanks. :(
Another working solution (mm or sm) against the uploader exploits?
Or you will be repair this error?

[asherkin]

Or you will be repair this error?

Yes, but my computer is currently inoperable.

[pubhero]

Game CSS
Linux
Latest mm
08:37:50 Metamod:Source version 1.9.0-dev
Build ID: 797:f9f87775019a-dev
Loaded As: Valve Server Plugin
Compiled on: Aug 22 2012
Plugin interface version: 15:14
SourceHook version: 5:5
http://www.metamodsource.net/and sm snapshots
08:37:55 SourceMod Version Information:
SourceMod Version: 1.5.0-dev
SourcePawn Engine: SourcePawn 1.1, jit-x86 (build 1.5.0-dev)
SourcePawn API: v1 = 4, v2 = 4
Compiled on: Aug 23 2012 22:38:37
Build ID: 3627:b6e36874284b-dev
http://www.sourcemod.net/What do you think? Maybe this extension works with this method? It seems for me, yes.

https://forums.alliedmods.net/showpost.php?p=1780038&postcount=970

- rename the: serversecure_files.ext.2.ep2v.so to serversecure_files.ext.2.css.so
- open the serversecure.txt gamedata file in the cstrike/addons/sourcemod/gamedata folder
- change this:
"engine" "orangebox_valve" to this:
"engine" "css"- Disable the autoupdate function in the cstrike/addons/sourcemod/configs/core.cfg Important step!
"DisableAutoUpdate" "yes"sm exts list:
[03] Server Secure - Files Only (1.0.0): The finest defenceI don't know, this really works or just show that for me. But no crash, no error messages for me.

Ps.: It seems works for me with the connect extensions too
[11] Connect (1.0.0):

[Nolongerinthegame]

Any support for CSGO soon?

[irogue]

Hi, i am wondering does this support l4d2 since according to valve dev info (found here: https://developer.valvesoftware.com/wiki/Left_4_Dead_%28engine_branch%29 )

The Left 4 Dead engine branch was released in 2008 with Left 4 Dead (https://developer.valvesoftware.com/wiki/Left_4_Dead), and continued in 2009 with Left 4 Dead 2 (https://developer.valvesoftware.com/wiki/Left_4_Dead_2). It was maintained side-by-side with the Orange Box (https://developer.valvesoftware.com/wiki/Orange_Box) branch, but was ultimately discontinued with the release of Portal 2 (https://developer.valvesoftware.com/wiki/Portal_2).
Unlike other branches, L4D does not require earlier versions of Source to be installed. It stands entirely alone.
thx


EDIT: nvm it seems it isn't supported according to the logs.

L 09/05/2012 - 17:31:39: Error log file session closed.
L 09/05/2012 - 17:32:38: SourceMod error session started
L 09/05/2012 - 17:32:38: Info (map "c2m2_fairgrounds") (file "errors_20120905.log")
L 09/05/2012 - 17:32:38: [SM] Unable to load extension "serversecure_files.ext": The specified module could not be found.


L 09/05/2012 - 17:32:43: Error log file session closed.

[Visual77]

first page says only supported on orange box :)

[-=Leb=-]

Hi asherkin, any idea why im getting this error today after the latest css update?
Im getting this error logs on all my 5 servers

im running sm 1.5.0-hg3655

L 09/11/2012 - 19:11:48: SourceMod error session started
L 09/11/2012 - 19:11:48: Info (map "de_dust2") (file "errors_20120911.log")
L 09/11/2012 - 19:11:48: [SM] Unable to load extension "serversecure_files.ext": The specified module could not be found.


thx in advance

[asherkin]

Hi asherkin, any idea why im getting this error today after the latest css update?
Im getting this error logs on all my 5 servers

im running sm 1.5.0-hg3655



thx in advance

This extension only currently has Source 2009 support, SourceMod treats CS:S as a separate engine now.

[-=Leb=-]

never mind after i installed sm 1.4.7-hg3572 (http://www.sourcemod.net/smdrop/1.4/sourcemod-1.4.7-hg3572-windows.zip) the error log disappeared


Note, thank you very much for your fast reply :)

[pubhero]

Update news?

[Powerlord]

This extension only currently has Source 2009 support, SourceMod treats CS:S as a separate engine now.
For this specific extension, for SourceMod 1.5, would renaming the ep2v version to css work?

[Mirandor]

For this specific extension, for SourceMod 1.5, would renaming the ep2v version to css work?

Nop!


[SERVSEC] Could not locate IsValidFileForTransfer - Disabling detour
[SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

[Powerlord]

Nop!


[SERVSEC] Could not locate IsValidFileForTransfer - Disabling detour
[SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

Since CSS resynced with the other OB games not long ago, you likely need to copy the #default gamedata over to the cstrike section, but I can't say that for sure.

[Mirandor]

yes i forgot to modify the gamedata :oops:

i'll check this out this evening...

EDIT: It works :)

But there was an error in the gamedata and after its correction i have to disable the autoupdater to get it work properly.

[01] Server Secure - Files Only (1.0.0): The finest defence

[Powerlord]

yes i forgot to modify the gamedata :oops:

i'll check this out this evening...

EDIT: It works :)

But there was an error in the gamedata and after its correction i have to disable the autoupdater to get it work properly.

[01] Server Secure - Files Only (1.0.0): The finest defence


I believe if you put the gamedata in gamedata/custom, it will override the version the autoupdater downloads. However, I'm not sure if this uses the extended gamedata format (I'm not even really sure what that means).

[asherkin]

I believe if you put the gamedata in gamedata/custom, it will override the version the autoupdater downloads.

That only applies to extended gamedata loading.

I see the typo I made in the file though, I'll fix is momentarily.
I suggest reporting issues and what you had to change in the future, instead of going the drastic path of disabling the updater.

[Jackmaster]

Download down?

[pubhero]

Hi.
We use the serversecure extension, but our all files (logs too) deleted yesterday. All server deleted on the server machine. A new exploit? Anyone know something?
CSS, metamod, sourcemod. Linux

[asherkin]

Your host machine was probably compromised.

[altex]

Is there a CS:GO version of ServerSecure plugin?
Is this issue fixed? https://forums.alliedmods.net/showthread.php?t=196520

[Sheepdude]

Is there a CS:GO version of ServerSecure plugin?
Is this issue fixed? https://forums.alliedmods.net/showthread.php?t=196520

I've been wondering the same thing, it's strange that the exploit's been boldfaced and announced but no fix for it...

[Nano2e]

will this be getting updated soon?

[Zephyrus]

will this be getting updated soon?

for which game? for tf2 you can just create symlinks for libvstdlib and libtier0 for csgo i just posted a new extension:

https://forums.alliedmods.net/showthread.php?t=199450

[Nano2e]

for tf2 yeh, if its that the ln -s thing on unix like os/s, i tried that and got g_memsomthing errors, sorry i cant remember the exact error ><

[Zephyrus]

for tf2 yeh, if its that the ln -s thing on unix like os/s, i tried that and got g_memsomthing errors, sorry i cant remember the exact error ><

ln -s libtier0_srv.so libtier0.so
ln -s libvstdlib_srv.so libvstdlib.so

in case it still doesnt work post your error message here, maybe it just needs a recompile

[asherkin]

As was posted in the main update thread, snapshot builds (http://build.limetech.org/dashboard/tab/build/download/artifacts/serversecure-1.3-linux/log20121027081615Lbuild.20.xml/serversecure_files.ext.so) have been available since the update.

[Nano2e]

i put smrcon and no-mvm back and done the symlinks again, got this error

L 10/28/2012 - 22:45:45: [SM] Unable to load extension "smrcon.ext": /home/atf2l/service240/tf2/orangebox/tf/addons/sourcemod/extensions/smrcon.ext.2.ep2v.so: undefined symbol: g_pMemAlloc

L 10/28/2012 - 22:45:45: [SM] Unable to load extension "nomvm.ext": /home/atf2l/service240/tf2/orangebox/tf/addons/sourcemod/extensions/nomvm.ext.2.ep2v.so: undefined symbol: g_pMemAlloc

use that snapshot asherkin posted no problems so far!

[asherkin]

You can't just symlink and expect old binaries to work, those extensions need recompiling against the new SDK.

[Nano2e]

yeh, i was just getting that error message for zeph i forgot it when i last looked at it ><

[Powerlord]

i put smrcon and no-mvm back and done the symlinks again, got this error

L 10/28/2012 - 22:45:45: [SM] Unable to load extension "nomvm.ext": /home/atf2l/service240/tf2/orangebox/tf/addons/sourcemod/extensions/nomvm.ext.2.ep2v.so: undefined symbol: g_pMemAllocuse that snapshot asherkin posted no problems so far!
Not much point to nomvm any more. Valve stopped precaching mvm sounds on non-mvm maps, and the ParticleEffects table size was doubled.

That's the only two things this did, with the additional problem that it interferes with the Be the Robot plugin by blocking the precaching of the sounds it uses.

As was posted in the main update thread, snapshot builds (http://build.limetech.org/dashboard/tab/build/download/artifacts/serversecure-1.3-linux/log20121027081615Lbuild.20.xml/serversecure_files.ext.so) have been available since the update.

There were no links to the snapshot builds of this extension in either thread prior to the post I'm replying to.

[pubhero]

This extension no longer support the CSS game? The latest snapshot not works with this game.
[05] <FAILED> file "serversecure_files.ext.so": libvstdlib_srv.so: cannot open shared object file: No such file or directory

[asherkin]

This extension no longer support the CSS game?
Indeed, this is only temporary.

[KiRRA]

G'day.

I apologize ahead of time as I am sure that this quesiton has been asked before but for the security of our server felt I should ask one last time. Most of our servers are running DAF as well as D-FENS. We initially installed D-FENS as recommended by the AlliedModders Official Wiki, found here: http://wiki.alliedmods.net/SRCDS_Hardening#Plugins I have read on the D-FENS plugin thread recently that it may be obsolete and serves no purpose anymore. I saw your post within that thread and here I am. So, without sounding like a broken record...is D-FENS officially dead/useless and will your plugin takes its place and keep our servers secure?


Please verify for me, thank you and have a great day!

[asherkin]

will your plugin takes its place and keep our servers secure?
Assuming you're running a supported engine, yes.

We initially installed D-FENS as recommended by the AlliedModders Official Wiki, found here: http://wiki.alliedmods.net/SRCDS_Hardening#Plugins
This is all user-contributed content by the way.

[Gonzofred]

Unfortunately, this extension is not for L4D2. Is there something similar that works for l4d2?

[DeJaDeW]

Is this still working for orangebox? I can't seem to get it working on SourceMod 1.5.0 hg3692

[SM] Unable to load extension "serversecure_files.ext": libvstdlib.so: cannot open shared object file: No such file or directory

[asherkin]

As was posted in the main update thread, snapshot builds (http://build.limetech.org/dashboard/tab/build/download/artifacts/serversecure-1.3-linux/log20121027081615Lbuild.20.xml/serversecure_files.ext.so) have been available since the update.

[DeJaDeW]

Service Temporarily Unavailable

The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

Apache Server at build.limetech.org Port 80

[asherkin]

God I could murder than thing, I really need to get this (it's the last thing) moved over to AMBuild and AlliedModders' buildbot.

Give it 15 minutes and it'll be back up, sorry about that.

[DeJaDeW]

Link and ext working. Thanks

[SuperRaWR]

I see this error has already been reported, however it looks as though it's been assumed as fixed?

Anyways, I'm running the latest build from here: http://build.limetech.org/dashboard/tab/build/detail/serversecure-1.3-linux/20121027081615

I'm still getting the error:

L 01/01/2013 - 01:17:45: [SM] Unable to load extension "serversecure_files.ext": libvstdlib.so: cannot open shared object file: No such file or directory

All other extensions I'm using that make use of this library have been updated and now load properly, I'm now only having a problem with ServerSecure.

[asherkin]

The compile log shows without question that it was built against libvstdlib_srv.so, I'd check that you actually uploaded the binary.

[SuperRaWR]

The compile log shows without question that it was built against libvstdlib_srv.so, I'd check that you actually uploaded the binary.

I have figured out the issue I was having. I had just copied the new binary into the extensions directory, overwriting the old one like I assumed you needed to, but it wouldn't load properly until I deleted serversecure_files.ext.2.ep2v.so from before. After I deleted serversecure_files.ext.2.ep2v.so, serversecure_files.ext.so would load properly and is now running.

I'm running this on a Team Fortress 2 server btw. Just out of curiosity, why would this happen?

[asherkin]

I have figured out the issue I was having. I had just copied the new binary into the extensions directory, overwriting the old one like I assumed you needed to, but it wouldn't load properly until I deleted serversecure_files.ext.2.ep2v.so from before. After I deleted serversecure_files.ext.2.ep2v.so, serversecure_files.ext.so would load properly and is now running.

I'm running this on a Team Fortress 2 server btw. Just out of curiosity, why would this happen?

Game specific file names (ext.<api>.<engine>.so) override general ones (ext.so). Since my old build system uses the old Makefiles, the binaries don't get the proper extension - I must've renamed the file to match when I made the release package.

Thanks for the donation <3.

[nadrojcote]

Is this extension broken on sm 1.5.0 with css? I cant get it to load with the latest snapshot.

[pubhero]

Which game? CSS? If yes, just rename the .so file to:
serversecure_files.ext.2.css.so

[dataviruset]

Hi Asher! I would be greatful if you could bring up your build system again (right now I get HTTP error 503) or let me know where I can get the latest build :) Thanks!

[nikedu45]

I looked forward to the new version.

[PlasteR]

wait for update for CSS :(

[Powerlord]

I looked forward to the new version.

wait for update for CSS :(

CS:S isn't officially supported, but the regular Orange Box version should work on CS:S again... although if you're using SourceMod 1.5, you need to rename it from serversecure_files.ext.2.ep2v.dll / serversecure_files.ext.2.ep2v.so to serversecure_files.ext.2.css.dll / serversecure_files.ext.2.css.so

[dataviruset]

I'm trying to get a download of the latest build.

[Powerlord]

I looked forward to the new version.

I'm trying to get a download of the latest build.
The release link in the main post was working when I tried it a few minutes ago.

[dataviruset]

The release link in the main post was working when I tried it a few minutes ago.
All right, is that the latest version? There was a build system under build.limetech.org earlier! :o

[Powerlord]

All right, is that the latest version? There was a build system under build.limetech.org earlier! :o
As far as I know it is.

It should be the version from the 2012/10/27 update, which is shortly after the Orange Box Halloween update that renamed these libraries for the OB Linux version. The last CS:S update synced it back with Orange Box, introducing that change into CS:S. You could always try running ldd against it to what what libraries it's compiled against.

Edit: I just checked, and you're right, it's compiled against the old version.

Bug Asherkin until he fixes the issues with the server. ;)

[dataviruset]

Edit: I just checked, and you're right, it's compiled against the old version.

Bug Asherkin until he fixes the issues with the server. ;)

:up:

[Powerlord]

I can manually recompile the Linux versions, but it appears that the Visual Studio project file (for building Windows versions) has weird issues. Namely, it appears to be a scaled down copy of SDKHooks' project and solution files. To put it nicely, the project's configuration tells it to build SDKHooks.dll while the Linker's configuration tells it to expect sdkhooks.ext.dll. I probably don't need to mention this causes an error... plus that's not the project's name anyway.

For that matter, it's set up to compile against MetaMod: Source 1.8, SourceMod 1.3, and the OB classic SDK (as opposed to OB Valve, which is Source 2009).

[asherkin]

I can manually recompile the Linux versions, but it appears that the Visual Studio project file (for building Windows versions) has weird issues. Namely, it appears to be a scaled down copy of SDKHooks' project and solution files. To put it nicely, the project's configuration tells it to build SDKHooks.dll while the Linker's configuration tells it to expect sdkhooks.ext.dll. I probably don't need to mention this causes an error... plus that's not the project's name anyway.

For that matter, it's set up to compile against MetaMod: Source 1.8, SourceMod 1.3, and the OB classic SDK (as opposed to OB Valve, which is Source 2009).

Welcome to the world of old crap.

[dataviruset]

Asher, thanks for bringing up the build site again. I downloaded the latest build from there and it seems to work on CS:S :)

[Powerlord]

Welcome to the world of old crap.

I took the time to update that old crap. :D

I even wrote a new (non-auto) Makefile updated to use MMSOURCE19 and SOURCEMOD14! I know it compiles the orangeboxvalve and css versions, but I omitted some -I lines that didn't seem relevant (they aren't in the sample_ext Makefile and aren't CDetour or asm).

I attached a zip of the msvc10 directory and Makefile.

While I'm at it, I also attached versions of serversecure_files compiled with these against the latest serversecure_files source (http://hg.limetech.org/sm-ext-dev/serversecure_files/archive/c24ebb1cf60c.zip) from Mercurial against the latest versions of hl2sdk-css, hl2sdk-orangeboxvalve, MetaMod:Source central, and SourceMod central. Although the CS:S and OBValve versions are identical sizes, so chances are they're not different.

I really sure should file a bug report to get some of the changes here merged into the SM 1.5 sample_ext Makefile. It still doesn't handle the _srv versions. Also, the BUILD_SUFFIX thing is nifty as you no longer have to rename the .so file manually.

[pubhero]

Good job. Thank you.

[nikedu45]

Thanks :D

[zeus]

Anyone made it work for csgo?
I'm getting this error

L 02/12/2013 - 20:53:58: [SM] Unable to load extension "serversecure_files.ext": /service/csgo/csgo/csgo/addons/sourcemod/extensions/serversecure_files.ext.so: undefined symbol: AssertValidStringPtr

SourceMod Version: 1.5.0-dev+3784

[Zephyrus]

Anyone made it work for csgo?
I'm getting this error

L 02/12/2013 - 20:53:58: [SM] Unable to load extension "serversecure_files.ext": /service/csgo/csgo/csgo/addons/sourcemod/extensions/serversecure_files.ext.so: undefined symbol: AssertValidStringPtrSourceMod Version: 1.5.0-dev+3784

it wont work for csgo, use this:
https://forums.alliedmods.net/showthread.php?p=1827879

[clutchh]

So, should we be using Powerlord's recent version for TF2?

[Sakretsos]

this is look like sv_pure ? or is not same ?

[Zephyrus]

this is look like sv_pure ? or is not same ?

not even related

[GoD-Tony]

Updated Windows gamedata for the SteamPipe releases.

[GoD-Tony]

Updated Windows gamedata for the SteamPipe releases.The function is actually quite different in these builds. It looks more strict, checking subdirectories etc. Can someone with more knowledge confirm if this extension will still be needed?

[asherkin]

The function is actually quite different in these builds. It looks more strict, checking subdirectories etc. Can someone with more knowledge confirm if this extension will still be needed?

I know the engine will at least now allow everything in the new content folder to be downloaded, it's part of the reason it was renamed away from addons - as it would have allowed clients to just download any server plugin's content. I'll take a look into it when I get a chance.

[-=Leb=-]

Hi asherkin, how can i get the extension to work on the new css update?

[asherkin]

Hi asherkin, how can i get the extension to work on the new css update?

You can't at the moment, there is a new filtering function in this update.

[pubhero]

The extension seems working after the new update, but block all players spray.

...
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:39:04: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:39:09: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:49: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:43:40: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:44:02: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:27: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:46:25: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
...

[nikedu45]

If you want to block sprays used : sv_allowupload "0"

but I searched the updates for linux

[Powerlord]

The extension seems working after the new update, but block all players spray.

...
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:39:03: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:39:04: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:39:09: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:41:07: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:47: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:41:49: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:10: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:35: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:43:40: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:43:58: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:44:02: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:15: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:45:27: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/53/53660c2c.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:46:19: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
L 04/17/2013 - 10:46:25: [SERVSEC] Blocking download: user_custom/88/882ab71a.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/d8/d8765651.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/9d/9de67b82.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/00/0004533a.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/36/36f7baea.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/37/374fbe50.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/90/90bc37ac.dat
L 04/17/2013 - 10:48:49: [SERVSEC] Blocking download: user_custom/92/92221adf.dat
...

Working, but not working correctly...

[pubhero]

This extension will not supported in the future? No offense. Just one question.

[asherkin]

This extension will not supported in the future? No offense. Just one question.

I know the engine will at least now allow everything in the new content folder to be downloaded, it's part of the reason it was renamed away from addons - as it would have allowed clients to just download any server plugin's content. I'll take a look into it when I get a chance.

[DontWannaName]

From my understanding this shouldnt be needed anymore with the new file system enhancements in place.

[friagram]

From my understanding this shouldnt be needed anymore with the new file system enhancements in place.


The only class of file that typically are sent from clients to gameservers are user sprays. They go in the dod/download/user_custom directory. They are no longer stored in a flat directory structure, so the OS filesystem won’t get stressed out so quickly if you have a lot of visitors and accumulate a lot of sprays.

https://support.steampowered.com/kb_article.php?ref=2519-IGXC-8453

Does the engine actually only allow files to be sent to the download directory now, and does it restrict them to sprays?

[pubhero]

This protection protect something now or not on the CSS servers?

[RavensBro]

L 05/13/2013 - 02:18:28: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 05/13/2013 - 02:18:28: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

[Powerlord]

L 05/13/2013 - 02:18:28: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 05/13/2013 - 02:18:28: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

Doesn't work as of the SteamPipe update anyway:

I know the engine will at least now allow everything in the new content folder to be downloaded, it's part of the reason it was renamed away from addons - as it would have allowed clients to just download any server plugin's content. I'll take a look into it when I get a chance.
and in direct response about running this on SteamPipe:
You can't at the moment, there is a new filtering function in this update.

[nightrider]

Question?
So if serversecure is not currently working with Steampipe
or is not required because of the updates from Valve.
Would re-installing D-FENS be worthwhile?

[AeroAcrobat]

I've read this post: https://forums.alliedmods.net/showpost.php?p=1950831&postcount=194

Just wanted to make sure that we can safely remove server secure now ?

TF2
sm exts list:
Server Secure - Files Only (1.0.0): The finest defence

my logs look like this:
L 06/02/2013 - 00:52:46: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:11: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:27: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:30: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:56:30: [SERVSEC] Blocking download: user_custom/9f/9fd62414.dat

[Powerlord]

I've read this post: https://forums.alliedmods.net/showpost.php?p=1950831&postcount=194

Just wanted to make sure that we can safely remove server secure now ?

TF2
sm exts list:
Server Secure - Files Only (1.0.0): The finest defencemy logs look like this:
L 06/02/2013 - 00:52:46: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:11: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:27: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:30: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:56:30: [SERVSEC] Blocking download: user_custom/9f/9fd62414.dat

It's blocking the transmission of user sprays to other users there. Or at least I think it is.

[asherkin]

You should remove it as it's broken, the exploit it fixes is probably not fixed though, someone else is welcome to post updated gamedata in the mean time.

[violentcrimes]

Has anyone updated this?

[Zephyrus]

You should remove it as it's broken, the exploit it fixes is probably not fixed though, someone else is welcome to post updated gamedata in the mean time.

ive made a poc for the exploit to try this, you can upload anything you want but they will all end up in the custom folder so it doesnt affect anything

[friagram]

You can/should deny file write perms to that dir anyways, yes?

[Zephyrus]

You can/should deny file write perms to that dir anyways, yes?

i guess you could, i have no idea if it matters tho

[Firewall_]

we wait for css v34 srcds .. :)

[psychonic]

we wait for css v34 srcds .. :)
no-steam = no support

[GoldTreeServers]

[SM] Unable to load extension "serversecure_files.ext": /home/tf2server1/tf2server1/tf/addons/sourcemod/extensions/serversecure_files.ext.2.ep2v.so: undefined symbol: g_pMemAlloc


Hmm..? I moved to linux server today to test so idk whats this

[Powerlord]

[SM] Unable to load extension "serversecure_files.ext": /home/tf2server1/tf2server1/tf/addons/sourcemod/extensions/serversecure_files.ext.2.ep2v.so: undefined symbol: g_pMemAlloc
Hmm..? I moved to linux server today to test so idk whats this
This extension hasn't worked since the SteamPipe update on any servers Linux or otherwise.
You should remove it as it's broken, the exploit it fixes is probably not fixed though, someone else is welcome to post updated gamedata in the mean time.

[Fearts]

Would be nice to see this working again after what happened recently.

[Dexa]

i'm getting this error


[01] <FAILED> file "serversecure_files.ext.dll": Plugin API 15 is newer than internal version (11)

SourceMod Version: 1.4.2


Metamod:Source version 1.8.7

[404UserNotFound]

i'm getting this error


[01] <FAILED> file "serversecure_files.ext.dll": Plugin API 15 is newer than internal version (11)SourceMod Version: 1.4.2


Metamod:Source version 1.8.7

See:

This extension hasn't worked since the SteamPipe update on any servers Linux or otherwise.

Simplified: IT DON'T BLOODY WORK MAN! YE MUST ABANDON SHIP AND STOP USING THIS THING. :grrr: YARR.

[Vastrix]

Soo euh :s
Is anyone planning on fixing this ?
Or has the exploit itself been fixed? :)

Thanks

[unscarred]

i got this error

[SM] Unable to load extension "serversecure_files.ext": /home/....zps/addons/sourcemod/extensions/serversecure_files.ext.so: cannot open shared object file: No such file or directory

zombiepanic server

[unscarred]

cant use on zps server ?

[Malak101]

cant use on zps server ?

ZPS runs on the Source Engine 2007 while this extension only supports 2009. Unless ZPS has been updated then this plugin is not compatible.

[unscarred]

ZPS runs on the Source Engine 2007 while this extension only supports 2009. Unless ZPS has been updated then this plugin is not compatible.

ok thanks.

[leet_k]

anyone have src? upload pls.