BattlEye Server Filters for DayZ Mod 1.8.4

[facoptere 180]

Ok because i can see in the graph that all your players was leaving at midnight ;)

Gametracker bug.

52 players are playing now and gametracker reports 5 players.

[DJ_Teschmi 31]

Oki ;)

We will come back to you after the password locked test.

[R.J. 70]

#205 = setvehicleinit.

Restart your server.

I restarted the server numerous times and players keep getting randomly kicked for #205. Perhaps most of them are hacking :) ?

NM, figured it out.

Edited June 29, 2013 by R.J.

[splant316 2]

I restarted the server numerous times and players keep getting randomly kicked for #205. Perhaps most of them are hacking :) ?

NM, figured it out.

What was the issue? Just curious

[DJ_Teschmi 31]

Hi Faco, hope you are well,

By my guess, i noticed 3 false positive with the new filters, here the logs:

PublicVariable restriction #84

01.07.2013 14:56:46: Movieh (xxxxxxx) xxxxxxx - Value Restriction #84 "remExFP" = [,,"per","execVM","ca\Modules\Functions\init.sqf"]

Setvariable restriction #0

29.06.2013 15:54:30: yruc (xxxxxxx) xxxxxxx - #0 "bis_greetedpeople" = [] 246:13 Bandit1_DZ

Script restriction #205

28.06.2013 09:23:07: Bursu (xxxxxxx) xxxxxxx - #205 "s select 2) + 1];
sleep 0.05;

All these players are known on our server and they was doing nothing special when the kick happened.

What do you think about that?

Thanks

Edited July 2, 2013 by DJ_Teschmi

[facoptere 180]

The current problem is that cheaters manage to inject some code to legit players. So you can't trust or blame anybody for a bad log line in scripts.txt.

I can't enable pattern #84 because this would reset the security system on all gameclients (it's first thing the cheaters are looking for) and BIS libs.

"bis_greetedpeople" pattern is very old, does not belong to DayZ code, and usually is part of a hack (I think).

#205 corresponds to a BIS libs reset (cheaters managed to reset security system too). You should see "setVehicleInit" 2 lines below. You have to restart your server when this occurs.

[DJ_Teschmi 31]

The current problem is that cheaters manage to inject some code to legit players. So you can't trust or blame anybody for a bad log line in scripts.txt.

I can't enable pattern #84 because this would reset the security system on all gameclients (it's first thing the cheaters are looking for) and BIS libs.

"bis_greetedpeople" pattern is very old, does not belong to DayZ code, and usually is part of a hack (I think).

#205 corresponds to a BIS libs reset (cheaters managed to reset security system too). You should see "setVehicleInit" 2 lines below. You have to restart your server when this occurs.

Thanks for these explanations ;) , we will check manually when these kind of kicks occurs.

[R.J. 70]

The current problem is that cheaters manage to inject some code to legit players. So you can't trust or blame anybody for a bad log line in scripts.txt.

I can't enable pattern #84 because this would reset the security system on all gameclients (it's first thing the cheaters are looking for) and BIS libs.

"bis_greetedpeople" pattern is very old, does not belong to DayZ code, and usually is part of a hack (I think).

#205 corresponds to a BIS libs reset (cheaters managed to reset security system too). You should see "setVehicleInit" 2 lines below. You have to restart your server when this occurs.

#205 is most annoying and kicks frequently. If I set this to setvehicleinit to 1, am I asking for trouble?

[facoptere 180]

#205 is most annoying and kicks frequently. If I set this to setvehicleinit to 1, am I asking for trouble?

If you do that, you lower the security level to what it was with DayZ Mod 1.7.6.1: cheaters allowed to remote exec anything on any gameclient.

[Griffith 62]

I was kicked from a server last night with a BattleEye script restricition 97 as well as a few other players. What is it ? or what information do I need to get you to resolve this ?

[facoptere 180]

I was kicked from a server last night with a BattleEye script restricition 97 as well as a few other players. What is it ? or what information do I need to get you to resolve this ?

You should contact your server admin and give him the same information.

[reactortrip 0]

What filter loads up to block access to the server control? I can't find the line in Scripts.txt where it use to be... I am running a DayZ.ST server and installed the new filters, but my players still have access to the server control and it does not boot them. I do not have access to the cfg file, is this what loads up all the new filter files?

DayZ.ST support is being completely unhelpful and pretty much telling me I have to do this all myself, but these filter files are pretty much being useless for me as all I have access to is the filter files and can't see how they are being loaded.

[facoptere 180]

What filter loads up to block access to the server control?

what do you mean by "server control"? Could you give a snapshot?

If you are talking about the standard panel where you can enter you admin password, it's properly filtered and you won't be kicked.

[Skydive (DayZ) 71]

A quick question for you, facoptere:

When the github filters that Dwarden maintains are updated, are your filters and the zip file in the OP updated as well?

[SmashT 10907]

A quick question for you, facoptere:

When the github filters that Dwarden maintains are updated, are your filters and the zip file in the OP updated as well?

Facoptere filters are updated version from my BE filters so this is as official as it can get , the new site is also official

[Night Wolf (DayZ) 0]

Good evening, put on clean server Epoch Chernarus

Add your own filters

showered heaps of false positives

began with

after turning off this trip in publicvariable.

# 0 "dayzLogin" = ["10836681", <NULL-object] in publicvariable.log

after turning off this trip in publicvariable.txt

appeared

 #26 "3, 0.37, 0.011, 3.750, 6, 4]; setToneMapping "Filmic";

BIS_Effects_Burn = compile preprocessFile "\ca\Data\ParticleEffects\S"
#88 " "\z\addons\dayz_code\compile\object_delLocal.sqf";

fnc_usec_damageHandler = compile preprocessFileLineNumbers "\z\addons\dayz_"
#101 "true;
{
if (_x > 0) then {_success = false};
} forEach _diff;
hint format["Config: %5\nEmpty: %1\nNeeded: %2\nDiff: %3\nSuccess:"

after removal of

scripts.txt and publicvariable.txt

it went with the periodic stripping

#14 "Skin_Functionary1_EP1_DZ" 0:0
#8 "FoodCanUnlabeled" 0:0
#14 "Skin_GUE_Soldier_MG_DZ" 0:0
#0 6:5 pz_worker3 1030640096 [-18688,25929,376]
#1 "[this] spawn BIS_Effects_AirDestruction"
#0 "[this, 6.35629, 767.102]spawn BIS_Effects_AirDestructionStage2"
#7 "DZ_Pastor" 4:29 [12911,7081,19]
#4 "Cow01_EP1" 4:31 [12927,7142,14]
#7 "DZ_Pastor" 4:34 [12911,7076,20]
#7 "DZ_Fin" 5:42 [10352,2649,12]
#4 "Cow01_EP1" 5:98 [10181,2653,28]
#7 "DZ_Pastor" 5:102 [10314,2668,14]
#55 "Cock" 5:108 [10449,2420,5]
#0 "Hit" 14:95 Survivor2_DZ - "_this spawn fnc_plyrHit;"
#36 "Hit" 14:95 Survivor2_DZ - "_this spawn fnc_plyrHit;"
#22 "DMR" 0:0
#6 "ItemKeyKit" 0:0
#14 "Skin_Functionary1_EP1_DZ" 0:0
#8 "FoodCanUnlabeled" 0:0
#14 "Skin_GUE_Soldier_MG_DZ" 0:0

in logs

1:48:26 ID of the server set up

1:48:49 NightWolf uses modified data file

1:48:49 BattlEye Server: Player # 0 NightWolf (XX.XX.XX.XX: 2304) connected

1:48:49 NightWolf player connects.1:48:49 Setting DayZ Epoch Chernarus read from the folder.

1:48:51 NightWolf player joined (id = 10836681).

1:48:51 BattlEye Server: Player # 0 NightWolf - GUID:

1:48:56 Roles are assigned.Reading assignments

1:48:56 ...

1:49:15 Setting loaded.1:49:51 The game started.

1:49:52 Player NightWolf kicked off by BattlEye: PublicVariable Restriction #0

1:49:52 NightWolf player disconnected.

1:48:26 ID of the server set up

1:48:49 NightWolf uses modified data file

1:48:49 BattlEye Server: Player # 0 NightWolf (XX.XX.XX.XX: 2304) connected

1:48:49 NightWolf player connects.1:48:49 Setting DayZ Epoch Chernarus read from the folder.

1:48:51 NightWolf player joined (id = 10836681).

1:48:51 BattlEye Server: Player # 0 NightWolf - GUID:

1:48:56 Roles are assigned.Reading assignments

1:48:56 ...

1:49:15 Setting loaded.

1:49:51 The game started.

1:49:52 Player NightWolf kicked off by BattlEye: PublicVariable Restriction #0

1:49:52 NightWolf player disconnected.

[facoptere 180]

Dayz Epoch is not DayZ official Mod.

You should ask this mod's author for a dedicated filter set.

There is no "hint" (messages on upper right corner) or "DZ_Pastor" (dogs) in vanilla DayZ.

[d-foster@hotmail.com 0]

Hi Facotpere, Just installed latest filters Scripts, and addweaponcargo since you udated an hour ago. I downloaded the whole Battleye pkg from github. everyone on server getting kicked for Script Restriction #25 including myself (Admin / Owner) . I changed lines 25-26 from 5 to 1 and we are getting back in game. Any suggestions? US 816

08.07.2013 01:35:54: Milo (66.243.206.199:2344) 0b616dcac05192e5130ce5eae381887b - #24 "[this] spawn BIS_Effects_AirDestruction"

08.07.2013 01:35:54: Milo (66.243.206.199:2344) 0b616dcac05192e5130ce5eae381887b - #25 "[this, 0.00922653, 13.241]spawn BIS_Effects_AirDestructionStage2"

08.07.2013 01:36:10: Home (177.177.136.42:2304) 397d089fe5fbd00a5b6562f162de2259 - #24 "[this] spawn BIS_Effects_AirDestruction"

08.07.2013 01:36:10: Home (177.177.136.42:2304) 397d089fe5fbd00a5b6562f162de2259 - #25 "[this, 0.00922653, 13.241]spawn BIS_Effects_AirDestructionStage2"

08.07.2013 01:38:22: Milo (66.243.206.199:2344) 0b616dcac05192e5130ce5eae381887b - #24 "[this] spawn BIS_Effects_AirDestruction"

08.07.2013 01:38:22: Milo (66.243.206.199:2344) 0b616dcac05192e5130ce5eae381887b - #25 "[this, 0.00922653, 13.241]spawn BIS_Effects_AirDestructionStage2"

Edited July 8, 2013 by Madwolf1967

[facoptere 180]

Hi Facotpere, Just installed latest filters Scripts, and addweaponcargo since you udated an hour ago. I downloaded the whole Battleye pkg from github. everyone on server getting kicked for Script Restriction #25 including myself (Admin / Owner) . I changed lines 25-26 from 5 to 1 and we are getting back in game. Any suggestions? US 816

08.07.2013 01:35:54: Milo (66.243.206.199:2344) 0b616dcac05192e5130ce5eae381887b - #24 "[this] spawn BIS_Effects_AirDestruction"

...

you have to restart your server when this occurs. Don't set to '1' unless you want cheaters do what they want on client side.

[d-foster@hotmail.com 0]

I had to RESTART twice but it came around. Script lines are set back at "5" . Thanks Facoptere

[Night Wolf (DayZ) 0]

Good day, for the sake of your filter changed modes on your :)

After starting the server a couple of cheaters caught what was certainly pleased, but one still could nasumonit yourself armor and weapons

tell me what I need to give you that it was possible to supplement the base filters

at the moment I learned

1 operates teleport

2 runs making things such as

[["NVGoggles","Binocular_Vector","ItemGPS","ItemCompass","ItemHatchet","ItemKnife","ItemMatchbox","ItemEtool","ItemToolbox","ItemMachete","M107_DZ","UZI_EP1"],["10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","10Rnd_127x99_m107","30Rnd_9x19_UZI","30Rnd_9x19_UZI","30Rnd_9x19_UZI","30Rnd_9x19_UZI","ItemBandage"]]

p/s

I'm creating a server on dayz novice, this issue when adding a site, say new cars and dogs filters should rule?

p/s 'm not friends with the English for that I apologize in advance :)

Edited July 9, 2013 by Night Wolf

[facoptere 180]

All private hive vehicles (former Bliss) are supported. With unknown vehicles you may experience some problem with vehicle damageable parts.

Teleport.

There is less and less teleport thanks to the anti-teleport background task on clientside.

Former obvious solutions were using setpos command, or attaching your own body to a (far) remote object. Using 'drag body' for example. This can't be done as easily. However, there is still a weakness with the debug area.

BE filters can't be an efficient solution to detect that. Your only hope is using scripts.txt, but it's a clientside filter so it can be bypassed. Current filter logs unexpected use of setpos and attachto. Don't expect miracles.

Preset Gear.

scripts.txt logs unexpected use of addweaponcargo and addmagazinecargo, and players can be kicked. However, this can be bypassed too.

If the pattern is always the same, you can detect it in hiveext.log. The Character ID is logged with the pattern. You can match this Character ID (CID) with arma2oaserver.RPT log file. Lines with "LOGIN PUBLISHING" log player's CID UID and name.

Edited July 9, 2013 by facoptere

[liukang168 4]

Hi, 

 

did anyone of you hosters ever encounter an error where the server is not able to connect to the hive?

 

Server was running for more then a year now without porblems, All of the sudden it gets hive timedout error resulting in the server to crash. 

 

Server did run once in 3 days now ... is it a problem on my end or on dayz hive?

 

Could someone advise?

[Night Wolf (DayZ) 0]

Good afternoon interested in this question
whether it is possible to filter the logs to find a unique entry belonging to one user? and on the basis of her ban to this user?
Ban by ID, not an option
By ip - Dynamic ...

[ameo_koradi@hotmail.com 103]

Faco,

 

We seem to have found what the alreadyGreeted means (Script Restr #101).

It happens when you change your skin from Hero to Sniper (Ghille).

 

20.07.2013 11:57:49: Moké (90.xx.x.xx:2384) 57b5xxxxxxxxxxxxxx80 - #101 ") || _PlayerInitiated) && _alreadyGreeted) then
{
private ["_hint", "_postFix"];
switch (_topic) do
{
case "core_en": {_postFi"

 

Edited July 21, 2013 by Ameo