[blue zebra]

Hi.
Can i filtering out (kick/ban) client automatically, who running metamod/sourcemod, client side?
The SMAC do nothing for me now.
Thanks is advance.

[Bacardi]

Originally Posted by blue zebra Hi. Can i filtering out (kick/ban) client automatically, who running metamod/sourcemod, client side? The SMAC do nothing for me now. Thanks is advance.

What the point use SMAC when players are able run mods in they game on your server....

[blue zebra]

Other ways to ask.
Can i detect and kick/ban clients from my servers with running metamod/sourcemod?

[GoD-Tony]

SMAC should already kick players that run them on the client.

[blue zebra]

We have an ***** with running (client side) metamod and sourcemod. The SMAC nothing to do with him. He write himself a sourcemod plugin and an extension. He attack our servers from sourcemod. He live here, on this forum. Asherkin know who are him. He are Hungarian too like i am.
We have multiple protections (yes, we have serversecure.extension too), but he can download any cfg file from any server with these aplets somehow. Voila he know all of our passwords.
Can i protect our servers somehow?
Thanks for your help and your time.

[asherkin]

Make your servers VAC secure if you want to stop people running client-side plugins (what game is this btw?).
ServerSecure will block any illegitimate attempt to download files, as you've been told in the past, your server's probably been compromised outside of SRCDS.

[blue zebra]

Thanks for the answer. My server are VAC secured. Game: CSS. Linux based servers. Metamod, sourcemod, DAF. Thats all.

[asherkin]

Originally Posted by blue zebra Thanks for the answer. My server are VAC secured. Game: CSS. Linux based servers.

It's highly doubtful anyone on the server is running clientside plugins.

[blue zebra]

It is no longer interesting. We have found the culprit.
"New" server hack from the closed section. Thanks anyway.
cmd.smx and system2.ext .
The attacker can download any(!!!) (linux too) configuration file from the server machine.
With root passwords. Works on linux, 100%. Say no more. Bravo guys.
Thank you, Mr.Zephyrus. Next step is the police. Go for it. Who cares.

include <sourcemod>
#include <system2>

public OnPluginStart()
{
RegServerCmd("sm_execute", Command_Execute);
}
...
...
...

Originally Posted by asherkin It's highly doubtful anyone on the server is running clientside plugins.

You're right. It's not client side. It's server side. Must be rent a server from the target hosting.

[Zephyrus]

/IN before he starts screamin my name.

that code snippet was made for a gsp owner who was testing the security of his servers
i dont take any resposibilities for how he used it afterwards

edit: anyway protection against this is to use an individual user for each servers and restrict the number of allowed processes to 1, also chmod srcds + lock each user to its server directory, a gsp whos incompetent enough not to do this shouldnt be allowed to host at all (100% of hungarian hosts)