[Kigen]

kac_removecmd does not change the checking for these commands. kac_removecmd is meant for removing commands from the disabled list.

Just increase kac_cmds_spam to a higher number if your getting a lot of kicks for command spam.

[nezinu5]

Oh, ok thanks. So i should not use those kac_removecmd lines. And additional question - which is safe to use number of kac_cmds_spam that prevents false detections and protects server at the same time? And speaking of rcon_lock for example this page talking about protection against various exploits mentions only rcon_lock, not kigenac http://wiki.alliedmods.net/SRCDS_Hardening Thats why for me that information is kinda misleading.

[Kigen]

You'll need to play around with kac_cmds_spam to see what number stops cause false positives (remember, 0 is disabling so avoid it). Considering that "SRCDS Hardening" was written by devicenull (the author of RCON Locker) that does not surprise me. (No offense devicenull.)

[asherkin]

That wiki page was only copypaste from his own website to get it started when a security page was requested in the Donor forum.
It's publicly available to editing, KAC just needs adding where it applies, along with other stuff that has since been released to target other exploits.

[Choucas]

Hi all,
I have a TF2 server and I have some strange errors on the KAC.log file since 1.2.0.9 update. Here are some examples :

L 03/26/2010 - 18:19:32: Unexpected CVar Reply: xxxx (ID: STEAM_0:1:xxxxxxx | IP: xxxxxxx) was kicked for returning convar "mat_fillrate" (expecting "bat_version") out of sync with value "0".

L 03/26/2010 - 22:45:32: Unexpected CVar Reply: xxxxx (ID: STEAM_0:1:xxxxx | IP: xxxxxxx) was kicked for returning convar "cl_phys_timescale" (expecting "r_drawtranslucentworld") out of sync with value "1.0".

L 03/29/2010 - 00:01:10: Unexpected CVar Reply: xxxx (ID: STEAM_0:1:xxxxxx | IP: xxxxxx) was kicked for returning convar "ManiAdminTakeOver" (expecting "SmAdminTakeover") out of sync with value "".

The expecting value seems errouneous to me. I haven't got similar problem on our L4D & L4D2 servers.

[ulx]

on CS:S it looks confusing as well:

L 03/29/2010 - 15:10:13: Unexpected CVar Reply: Æ’Ñ�û!â€　Ù‰|Schoolboy Maverick (ID: STEAM_0:0:23684209 | IP: 217.80.115.54) was kicked for returning convar "mani_admin_plugin_version" (expecting "openscript") out of sync with value "". L 03/29/2010 - 15:23:27: Unexpected CVar Reply: Padrino (ID: STEAM_0:0:27369662 | IP: 85.178.70.223) was kicked for returning convar "est_version" (expecting "bat_version") out of sync with value "". L 03/29/2010 - 16:44:12: Unexpected CVar Reply: Æ’Ñ�û!â€　Ù‰|Schoolboy Maverick (ID: STEAM_0:0:23684209 | IP: 217.80.115.54) replied with unexpected convar "mani_admin_plugin_version" (not expecting; result "Not found") with value ""

Why does KAC notice certain plugins on clients but is expecting other plugins on them? Or do I get it wrong and all is really working as designed?

OS = Linux
SM + MM = latest stable

[rautamiekka]

Originally Posted by ulx on CS:S it looks confusing as well: Why does KAC notice certain plugins on clients but is expecting other plugins on them? Or do I get it wrong and all is really working as designed? OS = Linux SM + MM = latest stable

Or the mentioned Players are using hax, meaning KAC is working as designed. At first it didn't make sense to me either but I just seconds ago realized they might be using a hack which returns bullshit to requests, which possibly could be used to attempt crash Server.

I checked the Steam IDs and they don't match anyone in my global banlist nor in my HLSW Database. Googling returned nothing either.

[ulx]

yep, good idea, absolutely possible as well ... lets see what Kigen says.

[siosios]

Originally Posted by ulx on CS:S it looks confusing as well: replied with unexpected convar "mani_admin_plugin_version" (not expecting; result "Not found")

if the plugin wasnt there the client wouldnt send anything back at all.

[DDemon]

Originally Posted by Kigen Set kac_cmds_spam to a high number like 50. Or if that doesn't work just to 0.

Forgive my question but I am still trying to learn this plugin so I can get it working right for me but where do I change that setting so it is permanent?