[friagram]

Originally Posted by DontWannaName From my understanding this shouldnt be needed anymore with the new file system enhancements in place.

The only class of file that typically are sent from clients to gameservers are user sprays. They go in the dod/download/user_custom directory. They are no longer stored in a flat directory structure, so the OS filesystem won’t get stressed out so quickly if you have a lot of visitors and accumulate a lot of sprays.

https://support.steampowered.com/kb_...2519-IGXC-8453

Does the engine actually only allow files to be sent to the download directory now, and does it restrict them to sprays?

[pubhero]

This protection protect something now or not on the CSS servers?

[RavensBro]

L 05/13/2013 - 02:18:28: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes
L 05/13/2013 - 02:18:28: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

[Powerlord]

Originally Posted by RavensBro L 05/13/2013 - 02:18:28: [SERVSEC] Sigscan for IsValidFileForTransfer failed - Disabling detour to prevent crashes L 05/13/2013 - 02:18:28: [SM] Unable to load extension "serversecure_files.ext": Couldn't find IsValidFileForTransfer function!

Doesn't work as of the SteamPipe update anyway:

Originally Posted by asherkin I know the engine will at least now allow everything in the new content folder to be downloaded, it's part of the reason it was renamed away from addons - as it would have allowed clients to just download any server plugin's content. I'll take a look into it when I get a chance.

and in direct response about running this on SteamPipe:

Originally Posted by asherkin You can't at the moment, there is a new filtering function in this update.

[nightrider]

Question?
So if serversecure is not currently working with Steampipe
or is not required because of the updates from Valve.
Would re-installing D-FENS be worthwhile?

[AeroAcrobat]

I've read this post: https://forums.alliedmods.net/showpo...&postcount=194

Just wanted to make sure that we can safely remove server secure now ?

TF2
sm exts list:

Server Secure - Files Only (1.0.0): The finest defence

my logs look like this:

L 06/02/2013 - 00:52:46: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:11: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:53:27: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat
L 06/02/2013 - 00:53:30: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat
L 06/02/2013 - 00:56:30: [SERVSEC] Blocking download: user_custom/9f/9fd62414.dat

[Powerlord]

Originally Posted by AeroAcrobat I've read this post: https://forums.alliedmods.net/showpo...&postcount=194 Just wanted to make sure that we can safely remove server secure now ? TF2 sm exts list: Server Secure - Files Only (1.0.0): The finest defence my logs look like this: L 06/02/2013 - 00:52:46: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat L 06/02/2013 - 00:53:11: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat L 06/02/2013 - 00:53:18: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat L 06/02/2013 - 00:53:27: [SERVSEC] Blocking download: user_custom/92/92b65e48.dat L 06/02/2013 - 00:53:30: [SERVSEC] Blocking download: user_custom/c1/c12cc55b.dat L 06/02/2013 - 00:56:30: [SERVSEC] Blocking download: user_custom/9f/9fd62414.dat

It's blocking the transmission of user sprays to other users there. Or at least I think it is.

[asherkin]

You should remove it as it's broken, the exploit it fixes is probably not fixed though, someone else is welcome to post updated gamedata in the mean time.

[violentcrimes]

Has anyone updated this?

[Zephyrus]

Originally Posted by asherkin You should remove it as it's broken, the exploit it fixes is probably not fixed though, someone else is welcome to post updated gamedata in the mean time.

ive made a poc for the exploit to try this, you can upload anything you want but they will all end up in the custom folder so it doesnt affect anything