Hide cvars from game monitor ?

[NouveauJoueur]

Anyone knows how to block cvar's scan from game monitors ?
What's their scanning way ? Only a list of cvars they ask to the server, their bot read the server.cfg ?

[DontWannaName]

They read public cvars.

[1nsane]

Anyone knows how to block cvar's scan from game monitors ?
What's their scanning way ? Only a list of cvars they ask to the server, their bot read the server.cfg ?

Which cvars exactly? Should be as easy as changing the flags to make them no longer public.

[NouveauJoueur]

like sm_noblock , mp_teamlimits, I don't want them to get my sourcemod / metamod version too ... How to block it from scanning my servers ?

[8088]

Maybe this related AMXX topic (https://forums.alliedmods.net/showthread.php?t=6057) may help you get further. Another (maybe too rigorous) thing you could do is have your firewall block the Game-Monitor ips/range, but then you won't get listed at all. And it won't help hiding your precious cvars, of course ;)

[1nsane]

Edit the following and add whatever cvars you need hidden. Should work.

public OnPluginStart()
{
new flags;
flags = GetCommandFlags("mp_teamlimits");
SetCommandFlags("mp_teamlimits", flags|FCVAR_PROTECTED);

flags = GetCommandFlags("sm_noblock");
SetCommandFlags("sm_noblock ", flags|FCVAR_PROTECTED);
}

Then compile it here:
http://www.sourcemod.net/compiler.php

[NouveauJoueur]

It compiles fine, but seems like the server still replies on mp_limitteams, or some other sv_ commands I tryed to hide. And the server isn't answering at all with sm_noblock command (unknown command) so I wonder how game monitor check it...

Is there a way to disable sm plugins list command ? So it wont display all the plugins on the server ? I really don't like to give all the info on my server security plugins to this bot ...

1) It can show every existing hole in the server's security ... (Bad coded plugin with an exploit, and it showes how the server is protected by some other plugins too)
2) Everyone can copy the server's settings, some times you work hard on "cooking" a good server and optimising it for the funniest game play possible, and the best cpu usage, and everyone can copy it just by looking at gamemonitor...

[FeuerSturm]

Game-Monitor reads all public convars with the "FCVAR_NOTIFY" flag,
you'll have to remove that flag from each convar that you want to hide.

Example for hiding "mp_timelimit":

public OnPluginStart()
{
new mpTimelimit = FindConVar("mp_timelimit")
new flags = GetConVarFlags(mpTimelimit)
flags &= ~FCVAR_NOTIFY
SetConVarFlags(mpTimelimit, flags)
}

[1nsane]

Game-Monitor reads all public convars with the "FCVAR_NOTIFY" flag,
you'll have to remove that flag from each convar that you want to hide.

Example for hiding "mp_timelimit":

public OnPluginStart()
{
mpTimelimit = FindConVar("mp_timelimit")
new flags = GetConVarFlags(mpTimelimit)
flags &= ~FCVAR_NOTIFY
SetConVarFlags(mpTimelimit, flags)
}


Furthermore G-M has NO access to the "sm plugins list" command like
noone else than the server admins have, no need to be paranoid about this :wink:

Oh right, FCVAR_NOTIFY.

Also everyone has access to `sm plugins list` and `meta list`.
Join a random server and try it out :P

Connected to 69.65.34.75:27015

Team Fortress
Map: cp_dustbowl
Players: 32 / 32
Build: 3897
Server Number: 1
] meta list
[01] SourceMod (1.2.1) by AlliedModders LLC
[02] Oil (1.4) by L. Duke
[03] FAKE CLIENTS Plugin (1.0.0.0) by AzuiSleet
[04] TF2 Tools (1.2.1) by AlliedModders LLC
[05] BinTools (1.2.1) by AlliedModders LLC
[06] SDK Tools (1.2.1) by AlliedModders LLC
] sm plugins list
"Admin Help" (1.2.1) by AlliedModders LLC
"Admin Menu" (1.2.1) by AlliedModders LLC
"Admin loggin" (1.0) by vIr-Dan
"Advertisements" (0.5.5) by Tsunami
"Anti-Flood" (1.2.1) by AlliedModders LLC
"Ban IP on ID ban hit" (1) by Adam Nowack <[email protected]>
"Basic Chat" (1.2.1) by AlliedModders LLC
"Basic Comm Control" (1.2.1) by AlliedModders LLC
"Basic Commands" (1.2.1) by AlliedModders LLC
"Basic Info Triggers" (1.2.1) by AlliedModders LLC
To see more, type "sm plugins 12"

[FeuerSturm]

ah shit, yes, you're right :oops:

[lhffan]

vbac and kac would be nice to be able to hide

[FeuerSturm]

vbac and kac would be nice to be able to hide

You can just remove public convars from plugins before compiling,
they will not be recognized by game-monitor after that. :wink:

[Doggie52]

Wow, that's a rather... big flaw if you ask me. Being able to list all plugins like that.

Shouldn't this be the admins choice?

[lhffan]

FeuerSturm

Can you develop a plugin that disables that. Don´t want no user login in on the server to be able to know what plugins that are running.

[FeuerSturm]

I can take a look at that, I'm pretty sure that I can detect the usage
of "meta", I'm not sure about blocking that though.

As for the plugin list, I have the feeling that it's in the SM core
and can't be blocked, but I'll see what I can do.

[C0nw0nk]

Don't mean to bump a old thread but i came across something for future reference i will be testing it to see if the CVAR tags work at hiding convar's from public view.

But this topic had a metamod plugin that looks like it accomplishes the same thing https://forums.alliedmods.net/showpost.php?p=62181&postcount=9
http://forums.alliedmods.net/showpost.php?p=1444315&postcount=6
//EDIT :

Game-Monitor reads all public convars with the "FCVAR_NOTIFY" flag,
you'll have to remove that flag from each convar that you want to hide.

Example for hiding "mp_timelimit":

public OnPluginStart()
{
new mpTimelimit = FindConVar("mp_timelimit")
new flags = GetConVarFlags(mpTimelimit)
flags &= ~FCVAR_NOTIFY
SetConVarFlags(mpTimelimit, flags)
}


Tried all methods you're method is infact the only working method thank you :) <3

http://forums.alliedmods.net/showthread.php?t=78571&page=4

[jimlake7321219]

Anyone knows how to block cvar's scan from game monitors ?
What's their scanning way ? Only a list of cvars they ask to the server, their bot read the server.cfg ?

你可以看这里，得到你要的答案！https://dev-cs.ru/resources/174/