DJ_Teschmi 31 Posted June 18, 2013 (edited) Hi guys,We are in 1.7.7.1 version for a couple of hours now and a hack just happened:All people were kicked for a setpos restriction #0 (BattleFieldClearance) and the hacker did this in the remoteexec.log:18.06.2013 16:05:49: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:07:13: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:07:57: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:08:07: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:08:12: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:08:15: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:08:32: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:08:50: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE; };"18.06.2013 16:10:13: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:10:20: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:10:31: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:10:45: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:10:48: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:10:56: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:11:09: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:11:36: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:11:52: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:12:10: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"18.06.2013 16:12:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"SRVFACO4567Facoptere, the hack was i guess dedicated to your server :( but was already used yesterday on many servers....I don't understand because this kind of hack was normaly catched by the filters right?Thanks for your help.DJ TESCHMI Edited June 19, 2013 by DJ_Teschmi Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 19, 2013 Hi Facoptere,Other little thing to add in the createvehicle.txt for the new 1.7.7.1 release:Add in the first line: !="z_new_worker4" !="z_new_worker2" !="z_new_worker3"Thanks Share this post Link to post Share on other sites
facoptere 180 Posted June 19, 2013 BE filters updated.http://dayzmod.com/forum/index.php?/topic/139058-battleye-server-files-for-dayzmod-177/#entry1363110 Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 19, 2013 BE filters updated.http://dayzmod.com/f...7/#entry1363110Thanks Facoptere, i will update my filters as soon as possible.The new "SRVFACO4567" remoteexec script will be catched with he new version of remoteexec,txt? Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 19, 2013 (edited) Just applied the new filters and one person has been instant kicked for "script restriction #192":19.06.2013 06:14:49: [sLuRP]Peppar (x.x.x.x:x) xxxxxxxxxxxxxxxxxxxx - #192 " (!isNull _agent) then {_agent setDir random 360;_agent setvelocity [0, 0, 1];_agent setPosATL _position; sleep 0.001;_pos"Any idea?Thanks Edited June 19, 2013 by DJ_Teschmi Share this post Link to post Share on other sites
facoptere 180 Posted June 19, 2013 The new "SRVFACO4567" remoteexec script will be catched with he new version of remoteexec,txt?it's removed in the list of PV (publicvariable.txt), so if a client uses this PV name he will be kicked. 1 Share this post Link to post Share on other sites
facoptere 180 Posted June 19, 2013 Just applied the new filters and one person has been instant kicked for "script restriction #192":Thanks#192 corresponds to "zeus_star", which is a hack. 1 Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 19, 2013 it's removed in the list of PV (publicvariable.txt), so if a client uses this PV name he will be kicked.#192 corresponds to "zeus_star", which is a hack. ;) Perfect !Thx Share this post Link to post Share on other sites
fpkelly 2 Posted June 19, 2013 Do I need to update our server with these new filters to make our server 1.7.7.1? Or will DayZ.ST do this? :( Share this post Link to post Share on other sites
ameo_koradi@hotmail.com 103 Posted June 19, 2013 (edited) Another hack, same hacker with another guid Faco :/Watch your remote Exec file guys19.06.2013 12:11:10: Chris (31.16.66.235:2384) a1ae626a200a4338680e1a1e605d34b5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",remExFP]; if (true) then RE; };"19.06.2013 12:11:10: Chris (31.16.66.235:2384) a1ae626a200a4338680e1a1e605d34b5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",remExFP]; if (true) then RE; };"Edit: quick fix before Faco doing it on github to prevent scripters -> add this to RE filter :5 remExFP Edited June 19, 2013 by Ameo Share this post Link to post Share on other sites
facoptere 180 Posted June 19, 2013 Edit: quick fix before Faco doing it on github to prevent scripters -> add this to RE filter :Don't do that. remExFP is used since it's the parent of all RE. 1 Share this post Link to post Share on other sites
ameo_koradi@hotmail.com 103 Posted June 19, 2013 ok then waiting for official fix ;) Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 20, 2013 Ahah ! I told you Ameo ! Kick for "remExFP" was not a good idea ;)Lot of work with all these new cheats dedicated to the new 1.7.7 version....Good luck Faco ;) Share this post Link to post Share on other sites
ameo_koradi@hotmail.com 103 Posted June 20, 2013 Maybe yes ! BUT instead of letting hackers do what they want, i keep it until an official fix, and as nobody was kicked for a false reason. Share this post Link to post Share on other sites
Gam3Junkie 34 Posted June 20, 2013 On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas? Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 20, 2013 On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas?With the new filters up to date? Your server is in 1.7.7.1 version? Share this post Link to post Share on other sites
DaBi 10 Posted June 20, 2013 There are lots of 5s. Not sure which file you are looking at that is all 1s. But no, logging isn't useless when used correctly. It lets you see useful information about activity on the server and monitor for abuse.I am looking at my scripts.txt and everything is 1 also Share this post Link to post Share on other sites
facoptere 180 Posted June 20, 2013 On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas?Could you paste few examples from pubvariable.log? Share this post Link to post Share on other sites
Gam3Junkie 34 Posted June 20, 2013 My bad, i ment setvariable, not pubvariable.20.06.2013 14:16:13: Daniel (X:20502) guid - #41 "temperature" = 42 3:8 Survivor2_DZ20.06.2013 14:16:34: Daniel (X:20502) guid - #27 "headshots" = 1 3:8 Survivor2_DZ20.06.2013 14:16:34: Daniel (X:20502) guid - #44 "zombiekills" = 1 3:8 Survivor2_DZ20.06.2013 14:16:35: Daniel (X:20502) guid - #0 "startcombattimer" = 0 3:8 Survivor2_DZ20.06.2013 14:27:08: Skattefutn (X:20502) guid - #41 "temperature" = 42 4:5 Survivor2_DZ20.06.2013 14:50:22: Simonh (X:20502) guid - #41 "temperature" = 42 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #6 "hit_pelvis" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #7 "hit_aimpoint" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #8 "hit_lelbow" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #9 "hit_relbow" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #10 "hit_rightfoot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #11 "hit_leftfoot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #12 "hit_neck" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #13 "hit_pilot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #4 "usec_injured" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #6 "hit_pelvis" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #7 "hit_aimpoint" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #8 "hit_lelbow" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #9 "hit_relbow" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #10 "hit_rightfoot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #11 "hit_leftfoot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #12 "hit_neck" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #13 "hit_pilot" = false 5:5 Bandit1_DZ20.06.2013 14:50:38: Simonh (X:20502) guid - #4 "usec_injured" = false 5:5 Bandit1_DZ20.06.2013 14:51:10: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ20.06.2013 14:51:10: Simonh (X:20502) guid - #42 "unconscioustime" = 4 5:5 Bandit1_DZ20.06.2013 14:51:15: Simonh (X:20502) guid - #42 "unconscioustime" = 0 5:5 Bandit1_DZ20.06.2013 14:51:15: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ20.06.2013 14:51:21: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ20.06.2013 14:51:22: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1595.65 5:5 Bandit1_DZ20.06.2013 14:51:23: Simonh (X:20502) guid - #0 "startcombattimer" = 0 5:5 Bandit1_DZ20.06.2013 14:51:54: Simonh (X:20502) guid - #41 "temperature" = 42 6:5 Bandit1_DZ20.06.2013 14:52:11: Simonh (X:20502) guid - #0 "startcombattimer" = 0 6:5 Bandit1_DZ20.06.2013 14:52:28: Simonh (X:20502) guid - #41 "temperature" = 42 7:5 Bandit1_DZ20.06.2013 14:52:33: Simonh (X:20502) guid - #34 "medforceupdate" = true 7:5 Bandit1_DZ20.06.2013 14:52:33: Simonh (X:20502) guid - #42 "unconscioustime" = 8 7:5 Bandit1_DZ20.06.2013 14:52:42: Simonh (X:20502) guid - #42 "unconscioustime" = 0 7:5 Bandit1_DZ20.06.2013 14:52:42: Simonh (X:20502) guid - #34 "medforceupdate" = true 7:5 Bandit1_DZ20.06.2013 14:52:57: Simonh (X:20502) guid - #0 "startcombattimer" = 0 7:5 Bandit1_DZ20.06.2013 15:16:26: fNUX (X:20502) guid - #41 "temperature" = 42 8:5 Survivor2_DZ20.06.2013 15:17:00: fNUX (X:20502) guid - #0 "startcombattimer" = 0 8:5 Survivor2_DZ20.06.2013 15:18:35: Simonh (X:20502) guid - #41 "temperature" = 42 9:5 Bandit1_DZ20.06.2013 15:18:55: Simonh (X:20502) guid - #34 "medforceupdate" = true 9:5 Bandit1_DZ20.06.2013 15:18:56: Simonh (X:20502) guid - #0 "startcombattimer" = 0 9:5 Bandit1_DZ20.06.2013 15:19:26: Simonh (X:20502) guid - #41 "temperature" = 42 10:5 Bandit1_DZ20.06.2013 15:20:17: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1616.92 10:5 Bandit1_DZ20.06.2013 15:20:33: Simonh (X:20502) guid - #15 "hit_legs" = 0.308655 10:5 Bandit1_DZ20.06.2013 15:20:33: Simonh (X:20502) guid - #34 "medforceupdate" = true 10:5 Bandit1_DZ20.06.2013 15:20:33: Simonh (X:20502) guid - #44 "zombiekills" = 22 10:5 Bandit1_DZ20.06.2013 15:20:34: Simonh (X:20502) guid - #0 "startcombattimer" = 0 10:5 Bandit1_DZ20.06.2013 15:21:05: Simonh (X:20502) guid - #41 "temperature" = 42 11:5 Bandit1_DZ20.06.2013 15:21:11: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ20.06.2013 15:21:11: Simonh (X:20502) guid - #42 "unconscioustime" = 8 11:5 Bandit1_DZ20.06.2013 15:21:21: Simonh (X:20502) guid - #42 "unconscioustime" = 0 11:5 Bandit1_DZ20.06.2013 15:21:21: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ20.06.2013 15:21:56: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1616.92 11:5 Bandit1_DZ20.06.2013 15:22:09: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ20.06.2013 15:22:09: Simonh (X:20502) guid - #42 "unconscioustime" = 2 11:5 Bandit1_DZ20.06.2013 15:22:12: Simonh (X:20502) guid - #42 "unconscioustime" = 0 11:5 Bandit1_DZ20.06.2013 15:22:12: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ20.06.2013 15:22:45: Daniel (X:20502) guid - #41 "temperature" = 42 12:5 Survivor2_DZ20.06.2013 15:22:46: Simonh (X:20502) guid - #0 "startcombattimer" = 0 11:5 Bandit1_DZ Share this post Link to post Share on other sites
facoptere 180 Posted June 20, 2013 startcombattimer is not a networked variable in 1.7.7.1, only "combattimeout" is networked.You are not using the latest files. 1 Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 20, 2013 (edited) Hi Faco,Can you explain the difference between the weapon "DMR" and "DMR_DZ" because you add a kick this morning in the addweaponcargo.txt for "DMR_DZ" and someone was kicked for that on my server.Maybe this rifle was renamed in 1.7.7 and some people are carrying the old version of this gun.And maybe you just wanted to remove it from logging, no?Thanks Edited June 20, 2013 by DJ_Teschmi Share this post Link to post Share on other sites
DaBi 10 Posted June 20, 2013 Can someone please help, I took the updated filters and copied these in to my battleye folder overwriting them. Now everything in the scripts.txt has a 1 in the front and on my server you used to be kicked for battleye 227 which was when players tried accessing the server control panel. Since i added the updated files everything is now accessible :huh: I am lost at what i should or need to do so any help would be really appreciated. Share this post Link to post Share on other sites
facoptere 180 Posted June 20, 2013 Can you explain the difference between the weapon "DMR" and "DMR_DZ" because you add a kick this morning in the addweaponcargo.txt for "DMR_DZ" and someone was kicked for that on my server.Maybe this rifle was renamed in 1.7.7 and some people are carrying the old version of this gun.Maybe I wrote the filter a bit before latest code changes, anyway this DMR_DZ kick is wrong.I checked again all weapons according to final 1.7.7.1 version, and I just updated these BE filters.You won't be kicked for the following weapons:BAF_AS50_scopedBizonG36aM107_DZM4A1_Aim_camoM4A1_HWS_GLDMR_DZBasically, all and only the fire weapons you can see in the first line of addweaponcargo.txt are enabled, since present in Dayz Mod source code. Share this post Link to post Share on other sites
DJ_Teschmi 31 Posted June 20, 2013 (edited) Thanks for the work ;)Edit:Faco are you sure that "DMR" was not the legit name for DMR before the upgrade to 1.7.7?Because some people are still carrying this weapon, maybe they looted it before the 1.7.7, no?I dont' have an old log here to verify that. Anyway i will not kick "DMR" on my server for the moment.Thanks Edited June 20, 2013 by DJ_Teschmi Share this post Link to post Share on other sites
Gam3Junkie 34 Posted June 20, 2013 startcombattimer is not a networked variable in 1.7.7.1, only "combattimeout" is networked.You are not using the latest files.I am 100% sure that it is updated, did it myself three times now.All the @dayz files, all the filters etc. Share this post Link to post Share on other sites
