My server redirects to another one?

LAWLIET · **Author**

Hello.
I has added an plugin, then restarted the server and when I connect to the server it redirects me to another server which is not online?
See when someone connects:

L 03/08/2015 - 04:462: "PaiN<11><STEAM_ID_LAN><>" connected, address "79.110.12
5.178:8262"
Dropped PaiN from server
Reason: Client sent 'drop'

And what it writes at the console:

Connecting to 79.124.59.234:27001...
Connection accepted by 79.124.59.234:27001
* Privileges set
Connecting to rasp.q2e.ru:27151...
Retrying rasp.q2e.ru:27151...
Retrying rasp.q2e.ru:27151...
Retrying rasp.q2e.ru:2

I has added the plugin: File watcher. Added the filewatcher.cfg file at cstrike folder, added orpheu module at modules folder + added orpheu folder at configs folder. And it is not blocking this redirect?

From amxx plugins (only the plugins I've added):

n 24] File watcher0.2mazdanfile_watcher.am running
[ 25] Respawn Forever1.1Pimp Daddy (OoTO respawn.amxxrunning

Any solutions?

**HamletEagle** · *Last edited by HamletEagle; 03-08-2015 at 05:20.*

Update your server with steamcmd and remove dproto. This should fix the exploit. Also, completly reinstall your server to be sure that all redirects are removed.

Phant · 03-08-2015 , 05:35 Re: My server redirects to another one?

Disable all AMXX plugins, restart the server and test it. Sounds like some plugin do redirect.

fysiks · 03-08-2015 , 05:37 Re: My server redirects to another one?

Quote:

Originally Posted by Phant

Disable all AMXX plugins, restart the server and test it. Sounds like some plugin do redirect.

That's exactly what he says in the first sentence.

LAWLIET · 03-08-2015 , 07:26 Re: My server redirects to another one?

Hi all.

I has renamed plugins.ini to 88891.ini to stop all plugins. Then I joined in the server and it worked.
Then I renamed it back to plugins.ini and disabled all 3rd party plugins, and only the defualt AMXX Plugins were enabled others no. I joined to the server and:

] connect 79.124.59.234:27001
Connecting to 79.124.59.234:27001...
Trying p48/auth3/revEmu...
Connection accepted by 79.124.59.234:27001
* Privileges set
Connecting to rasp.q2e.ru:271

Help please!

**Arkshine** · *Last edited by Arkshine; 03-08-2015 at 07:54.*

Make sure you did not miss 3rd party plugins, like declared at the top or something.
Ultimately, re-download 1.8.2 or 1.8.3-dev (from the official site, always) depending what you're using, and overwrite all default plugins (.amxx) on your server. Do the same for default modules (.dll//so).

ANTICHRISTUS · 03-08-2015 , 07:56 Re: My server redirects to another one?

Quote:

Originally Posted by LAWLIET

and only the defualt AMXX Plugins were enabled others no. I joined to the server

Reinstall AMXX from here and nowhere else.

LAWLIET · 03-08-2015 , 09:22 Re: My server redirects to another one?

I has replaced all of the AMXX defualt plugins with original ones, and it worked.
How I can protect my self from these ***** ?

Phant · 03-08-2015 , 09:30 Re: My server redirects to another one?

Quote:

Originally Posted by LAWLIET

How I can protect my self from these ***** ?

Just download AMXX and other from official sources (web-sites).

**HamletEagle** · *Last edited by HamletEagle; 03-08-2015 at 09:36.*

This is an exploit called raiz0 or so, which give to the attacker the right to upload any file he want into the server, without ftp acces. Remove dproto, update your server, remove motd.txt, set permissions to write in ftp only to owners, install file watcher and make sure it is running. This should be enough.