Jump to content
facoptere

BattlEye Server Filters for DayZ Mod 1.8.4

Recommended Posts

Hi guys,

We are in 1.7.7.1 version for a couple of hours now and a hack just happened:

All people were kicked for a setpos restriction #0 (BattleFieldClearance) and the hacker did this in the remoteexec.log:

18.06.2013 16:05:49: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:07:13: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:07:57: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:08:07: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:08:12: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:08:15: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:08:32: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:08:50: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""

18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""

18.06.2013 16:09:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 ""

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #0 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:09:23: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 " if (isDedicated) then { _this = [nil,nil,"per",SRVFACO4567]; if (true) then RE;

};"

18.06.2013 16:10:13: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:10:20: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:10:31: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:10:45: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:10:48: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:10:56: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:11:09: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:11:36: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:11:52: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:12:10: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

18.06.2013 16:12:22: Chris (2) (31.16.66.235:2384) d8aaf666da65ba7ebff28c9acc5df1d5 - #37 "this enableSimulation false;this allowDammage false;this disableAI 'FSM';this disableAI 'ANIM';this disableAI 'MOVE';"

SRVFACO4567

Facoptere, the hack was i guess dedicated to your server :( but was already used yesterday on many servers....

I don't understand because this kind of hack was normaly catched by the filters right?

Thanks for your help.

DJ TESCHMI

Edited by DJ_Teschmi

Share this post


Link to post
Share on other sites

Hi Facoptere,

Other little thing to add in the createvehicle.txt for the new 1.7.7.1 release:

Add in the first line:

!="z_new_worker4" !="z_new_worker2" !="z_new_worker3"

Thanks

Share this post


Link to post
Share on other sites

Just applied the new filters and one person has been instant kicked for "script restriction #192":

19.06.2013 06:14:49: [sLuRP]Peppar (x.x.x.x:x) xxxxxxxxxxxxxxxxxxxx - #192 " (!isNull _agent) then {

_agent setDir random 360;

_agent setvelocity [0, 0, 1];

_agent setPosATL _position; sleep 0.001;

_pos"

Any idea?

Thanks

Edited by DJ_Teschmi

Share this post


Link to post
Share on other sites

The new "SRVFACO4567" remoteexec script will be catched with he new version of remoteexec,txt?

it's removed in the list of PV (publicvariable.txt), so if a client uses this PV name he will be kicked.

  • Like 1

Share this post


Link to post
Share on other sites

Just applied the new filters and one person has been instant kicked for "script restriction #192":

Thanks

#192 corresponds to "zeus_star", which is a hack.

  • Like 1

Share this post


Link to post
Share on other sites

it's removed in the list of PV (publicvariable.txt), so if a client uses this PV name he will be kicked.

#192 corresponds to "zeus_star", which is a hack.

;) Perfect !

Thx

Share this post


Link to post
Share on other sites

Do I need to update our server with these new filters to make our server 1.7.7.1? Or will DayZ.ST do this? :(

Share this post


Link to post
Share on other sites

Another hack, same hacker with another guid Faco :/

Watch your remote Exec file guys

19.06.2013 12:11:10: Chris (31.16.66.235:2384) a1ae626a200a4338680e1a1e605d34b5 - #0 "

if (isDedicated) then

{

_this = [nil,nil,"per",remExFP];

if (true) then RE;

};"

19.06.2013 12:11:10: Chris (31.16.66.235:2384) a1ae626a200a4338680e1a1e605d34b5 - #37 "

if (isDedicated) then

{

_this = [nil,nil,"per",remExFP];

if (true) then RE;

};"

Edit: quick fix before Faco doing it on github to prevent scripters -> add this to RE filter :

5 remExFP
Edited by Ameo

Share this post


Link to post
Share on other sites

Edit: quick fix before Faco doing it on github to prevent scripters -> add this to RE filter :

Don't do that. remExFP is used since it's the parent of all RE.

  • Like 1

Share this post


Link to post
Share on other sites

Ahah ! I told you Ameo ! Kick for "remExFP" was not a good idea ;)

Lot of work with all these new cheats dedicated to the new 1.7.7 version....

Good luck Faco ;)

Share this post


Link to post
Share on other sites

On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas?

Share this post


Link to post
Share on other sites

On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas?

With the new filters up to date? Your server is in 1.7.7.1 version?

Share this post


Link to post
Share on other sites

There are lots of 5s. Not sure which file you are looking at that is all 1s. But no, logging isn't useless when used correctly. It lets you see useful information about activity on the server and monitor for abuse.

I am looking at my scripts.txt and everything is 1 also

Share this post


Link to post
Share on other sites

On my server whenever someone gets injured or try and attack someone(or something), they get instakicked for pubvariable #0, any ideas?

Could you paste few examples from pubvariable.log?

Share this post


Link to post
Share on other sites

My bad, i ment setvariable, not pubvariable.

20.06.2013 14:16:13: Daniel (X:20502) guid - #41 "temperature" = 42 3:8 Survivor2_DZ

20.06.2013 14:16:34: Daniel (X:20502) guid - #27 "headshots" = 1 3:8 Survivor2_DZ

20.06.2013 14:16:34: Daniel (X:20502) guid - #44 "zombiekills" = 1 3:8 Survivor2_DZ

20.06.2013 14:16:35: Daniel (X:20502) guid - #0 "startcombattimer" = 0 3:8 Survivor2_DZ

20.06.2013 14:27:08: Skattefutn (X:20502) guid - #41 "temperature" = 42 4:5 Survivor2_DZ

20.06.2013 14:50:22: Simonh (X:20502) guid - #41 "temperature" = 42 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #6 "hit_pelvis" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #7 "hit_aimpoint" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #8 "hit_lelbow" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #9 "hit_relbow" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #10 "hit_rightfoot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #11 "hit_leftfoot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #12 "hit_neck" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #13 "hit_pilot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #4 "usec_injured" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #6 "hit_pelvis" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #7 "hit_aimpoint" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #8 "hit_lelbow" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #9 "hit_relbow" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #10 "hit_rightfoot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #11 "hit_leftfoot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #12 "hit_neck" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #13 "hit_pilot" = false 5:5 Bandit1_DZ

20.06.2013 14:50:38: Simonh (X:20502) guid - #4 "usec_injured" = false 5:5 Bandit1_DZ

20.06.2013 14:51:10: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ

20.06.2013 14:51:10: Simonh (X:20502) guid - #42 "unconscioustime" = 4 5:5 Bandit1_DZ

20.06.2013 14:51:15: Simonh (X:20502) guid - #42 "unconscioustime" = 0 5:5 Bandit1_DZ

20.06.2013 14:51:15: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ

20.06.2013 14:51:21: Simonh (X:20502) guid - #34 "medforceupdate" = true 5:5 Bandit1_DZ

20.06.2013 14:51:22: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1595.65 5:5 Bandit1_DZ

20.06.2013 14:51:23: Simonh (X:20502) guid - #0 "startcombattimer" = 0 5:5 Bandit1_DZ

20.06.2013 14:51:54: Simonh (X:20502) guid - #41 "temperature" = 42 6:5 Bandit1_DZ

20.06.2013 14:52:11: Simonh (X:20502) guid - #0 "startcombattimer" = 0 6:5 Bandit1_DZ

20.06.2013 14:52:28: Simonh (X:20502) guid - #41 "temperature" = 42 7:5 Bandit1_DZ

20.06.2013 14:52:33: Simonh (X:20502) guid - #34 "medforceupdate" = true 7:5 Bandit1_DZ

20.06.2013 14:52:33: Simonh (X:20502) guid - #42 "unconscioustime" = 8 7:5 Bandit1_DZ

20.06.2013 14:52:42: Simonh (X:20502) guid - #42 "unconscioustime" = 0 7:5 Bandit1_DZ

20.06.2013 14:52:42: Simonh (X:20502) guid - #34 "medforceupdate" = true 7:5 Bandit1_DZ

20.06.2013 14:52:57: Simonh (X:20502) guid - #0 "startcombattimer" = 0 7:5 Bandit1_DZ

20.06.2013 15:16:26: fNUX (X:20502) guid - #41 "temperature" = 42 8:5 Survivor2_DZ

20.06.2013 15:17:00: fNUX (X:20502) guid - #0 "startcombattimer" = 0 8:5 Survivor2_DZ

20.06.2013 15:18:35: Simonh (X:20502) guid - #41 "temperature" = 42 9:5 Bandit1_DZ

20.06.2013 15:18:55: Simonh (X:20502) guid - #34 "medforceupdate" = true 9:5 Bandit1_DZ

20.06.2013 15:18:56: Simonh (X:20502) guid - #0 "startcombattimer" = 0 9:5 Bandit1_DZ

20.06.2013 15:19:26: Simonh (X:20502) guid - #41 "temperature" = 42 10:5 Bandit1_DZ

20.06.2013 15:20:17: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1616.92 10:5 Bandit1_DZ

20.06.2013 15:20:33: Simonh (X:20502) guid - #15 "hit_legs" = 0.308655 10:5 Bandit1_DZ

20.06.2013 15:20:33: Simonh (X:20502) guid - #34 "medforceupdate" = true 10:5 Bandit1_DZ

20.06.2013 15:20:33: Simonh (X:20502) guid - #44 "zombiekills" = 22 10:5 Bandit1_DZ

20.06.2013 15:20:34: Simonh (X:20502) guid - #0 "startcombattimer" = 0 10:5 Bandit1_DZ

20.06.2013 15:21:05: Simonh (X:20502) guid - #41 "temperature" = 42 11:5 Bandit1_DZ

20.06.2013 15:21:11: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ

20.06.2013 15:21:11: Simonh (X:20502) guid - #42 "unconscioustime" = 8 11:5 Bandit1_DZ

20.06.2013 15:21:21: Simonh (X:20502) guid - #42 "unconscioustime" = 0 11:5 Bandit1_DZ

20.06.2013 15:21:21: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ

20.06.2013 15:21:56: Simonh (X:20502) guid - #3 "usec_bloodqty" = 1616.92 11:5 Bandit1_DZ

20.06.2013 15:22:09: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ

20.06.2013 15:22:09: Simonh (X:20502) guid - #42 "unconscioustime" = 2 11:5 Bandit1_DZ

20.06.2013 15:22:12: Simonh (X:20502) guid - #42 "unconscioustime" = 0 11:5 Bandit1_DZ

20.06.2013 15:22:12: Simonh (X:20502) guid - #34 "medforceupdate" = true 11:5 Bandit1_DZ

20.06.2013 15:22:45: Daniel (X:20502) guid - #41 "temperature" = 42 12:5 Survivor2_DZ

20.06.2013 15:22:46: Simonh (X:20502) guid - #0 "startcombattimer" = 0 11:5 Bandit1_DZ

Share this post


Link to post
Share on other sites

startcombattimer is not a networked variable in 1.7.7.1, only "combattimeout" is networked.

You are not using the latest files.

  • Like 1

Share this post


Link to post
Share on other sites

Hi Faco,

Can you explain the difference between the weapon "DMR" and "DMR_DZ" because you add a kick this morning in the addweaponcargo.txt for "DMR_DZ" and someone was kicked for that on my server.

Maybe this rifle was renamed in 1.7.7 and some people are carrying the old version of this gun.

And maybe you just wanted to remove it from logging, no?

Thanks

Edited by DJ_Teschmi

Share this post


Link to post
Share on other sites

Can someone please help, I took the updated filters and copied these in to my battleye folder overwriting them. Now everything in the scripts.txt has a 1 in the front and on my server you used to be kicked for battleye 227 which was when players tried accessing the server control panel. Since i added the updated files everything is now accessible :huh: I am lost at what i should or need to do so any help would be really appreciated.

Share this post


Link to post
Share on other sites

Can you explain the difference between the weapon "DMR" and "DMR_DZ" because you add a kick this morning in the addweaponcargo.txt for "DMR_DZ" and someone was kicked for that on my server.

Maybe this rifle was renamed in 1.7.7 and some people are carrying the old version of this gun.

Maybe I wrote the filter a bit before latest code changes, anyway this DMR_DZ kick is wrong.

I checked again all weapons according to final 1.7.7.1 version, and I just updated these BE filters.

You won't be kicked for the following weapons:

BAF_AS50_scoped

Bizon

G36a

M107_DZ

M4A1_Aim_camo

M4A1_HWS_GL

DMR_DZ

Basically, all and only the fire weapons you can see in the first line of addweaponcargo.txt are enabled, since present in Dayz Mod source code.

Share this post


Link to post
Share on other sites

Thanks for the work ;)

Edit:

Faco are you sure that "DMR" was not the legit name for DMR before the upgrade to 1.7.7?

Because some people are still carrying this weapon, maybe they looted it before the 1.7.7, no?

I dont' have an old log here to verify that. Anyway i will not kick "DMR" on my server for the moment.

Thanks

Edited by DJ_Teschmi

Share this post


Link to post
Share on other sites

startcombattimer is not a networked variable in 1.7.7.1, only "combattimeout" is networked.

You are not using the latest files.

I am 100% sure that it is updated, did it myself three times now.

All the @dayz files, all the filters etc.

Share this post


Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now

×