Thanks maximumdark. You brought me on the right track. I totally forgot about this shit.
[21:50:48] Scott Timlock:
[Only registered and activated users can see links. Click Here To Register...]
[21:53:31] Akasch: bahahaha
[21:53:53] Scott Timlock: seems like a good answer to all those fuckers who do that
[21:53:57] Akasch: xD
[21:53:59] Scott Timlock: btw...
[21:54:18] Scott Timlock:
[Only registered and activated users can see links. Click Here To Register...]
[21:54:42] Scott Timlock: im not sure if that would actually effect your configuration
[21:54:44] Scott Timlock: but it could
[21:54:57] Akasch: uhm
[21:54:59] Akasch: this wouldnt work
[21:55:20] Akasch: its not about the gate ip
[21:56:02] Scott Timlock: no... but if your protection considered each "port" as a connection rather then ip
[21:56:16] Scott Timlock: and it blocks packets... that could cause a c9 error?
[21:57:19] Akasch: uhm
[21:57:21] Akasch: idk what u mean
[21:57:48] Scott Timlock: idk
[21:58:06] Scott Timlock: i dont know enough about your configuration to give you an exact answer to your problem
[21:58:15] Scott Timlock: just threw an idea
[22:00:54] Akasch: yeh
[22:00:57] Akasch: its how it usually work
[22:01:04] Akasch: but our setup is a lil weird
[22:01:08] Akasch: we got 2 protections basically
[22:01:11] Scott Timlock: yea i know
[22:01:13] Akasch: 2 different backend HPP ips
[22:01:16] Akasch: and 3 servers
[22:01:16] Akasch: xD
[22:01:26] Scott Timlock:
[Only registered and activated users can see links. Click Here To Register...]
[22:01:33] Akasch: i want part of the connections to go through the mian srv
[22:01:37] Akasch: basically for srv#1
[22:01:41] Akasch: and #3 to have its own shit
[22:01:49] Scott Timlock: yea i know
[22:02:29] Akasch: OH WAIT
[22:02:29] Akasch: FUCK
[22:02:31] Akasch: i know why
[22:02:33] Akasch: oh god damit
[22:02:33] Scott Timlock: WHY THE FUCK does every server thread have that supid red letter
[22:02:34] Akasch: im so stupid
[22:02:42] Scott Timlock: oh? what is it
[22:02:48] Scott Timlock: you closed a port
[22:02:50] Akasch: no
[22:02:53] Akasch: its the gate spoofing
[22:03:04] Akasch: i dont think the gate is spoofed to HPP
[22:03:10] Akasch: cuz it allowes connections anyways
[22:03:26] Scott Timlock: and that would interfear in the gateway/agent handshake
[22:03:29] Akasch: yeah
[22:03:32] Akasch: cuz it runs on local IP
[22:03:46] Scott Timlock: and the agent cant recieve it because of hpp
[22:03:52] Akasch: exactly
[22:03:55] Akasch: but it works for #1 and #2
[22:03:56] Scott Timlock: smooth
[22:03:59] Akasch: because it receives it locally
[22:04:06] Akasch: i mean it gets it through HPP
[22:04:09] Akasch: but it receives it locally
[22:04:09] Scott Timlock: yea
[22:04:14] Akasch: i pass on the client IP ofc
[22:04:15] Akasch: from HPP
[22:04:18] Akasch: but it probalby doesnt care
[22:04:20] Akasch: abotu that at all
[22:04:24] Scott Timlock: so 33% of people would get c9
[22:04:28] Akasch: yeah
[22:04:31] Akasch: atm i changed it all abck 2 normal
[22:04:37] Akasch: so it all runs through the mian ip anyways
[22:04:45] Scott Timlock: post this convo
[22:04:53] Akasch: wait wait
[22:04:56] Akasch: xDD
[22:04:57] Akasch: ok
[22:05:04] Akasch: so well how do i fix this
[22:05:12] Akasch: I gotta interferein the gateway - agent connections
[22:05:18] Akasch: and make a packet filter between them
[22:05:24] Akasch: then filter out the handshake packets
[22:05:32] Akasch: and pass on the proper IP that i want to be passed on
[22:05:40] Akasch: That should work, shouldnt it? xD
[22:05:51] Scott Timlock: why cant you just run the gateway through hpp?
[22:05:57] Scott Timlock: instead of local
[22:06:13] Akasch: its not just the gateway
[22:06:21] Akasch: its the packet filter that would need to be bound to HPPs IP
[22:06:36] Akasch: But i cant bind the filter
[22:06:52] Scott Timlock: well i suppose you could keep the gw local and filter the handshake
[22:06:56] Akasch: exactly
[22:06:58] Akasch: thats the plann
[22:07:05] Akasch: I'll just filter the fucking handshake
[22:07:07] Scott Timlock: dont miss any packets
[22:07:09 | Bearbeitet 22:07:13] Akasch: time to build a gateway-agent packet filter
[22:07:16] Scott Timlock: ur you will forever get c9/10
[22:07:21] Akasch: haha
Quote:
Originally Posted by MaximumDark
i think you just have a busy day hehehe.
don't forget your packet filter is a proxy, so agent server will want that 'your players' have the same IP that they used to login in gateway server, so if that is different, then they will get kicked.
to illustrate it, lets say they login with ip 10.0.0.1 in gateway, then they connect to your packet filter and the packet filter connect to agent server with ip 10.0.0.2 (you will get C9 because of that).
the solution is to make they login via packet filter too, this way they always have same IP.
|
The login had a filter as well ^^
But thats not the issue.. its the spoofing of the gateway in the first place. Read the other post above.