Preventing steam id changing? - Developers

Not just you.

<$Python¹³²º> !lua print(GetConVarString'ip') 88.191.104.162 You're just doing your server config wrong. This "ip" can be set to pretty much anything in fact. GetConVarString"hostip" to the rescue, have fun getting the ip from the integer though.

[QUOTE=kp3;20816364]I don't know about other countires, But in sweden, Static ip adresses are rare. The biggest providers, Telia, Comhem, Telenor (Bredbandsbolaget) etc don't offer that. Only smaller isp's like bahnof has it.[/QUOTE] yeah the point is even if it is dynamic it doesn't change instantly addip is the fix. if you look for another method, you will not find it and you'll end up with over-engineered garbage.

[QUOTE=Soda;20819088]yeah the point is even if it is dynamic it doesn't change instantly addip is the fix. if you look for another method, you will not find it and you'll end up with over-engineered garbage.[/QUOTE] Far more people have dynamic ip's than private steam profiles.

btw point is: dynamic IPs take effort to reset, and you're not going to ban everyone with a private profile that's just dumb finding another private profile takes literally 0 effort, and I really don't see the point you're trying to make there

[QUOTE=Soda;20819475]btw point is: dynamic IPs take effort to reset, and you're not going to ban everyone with a private profile that's just dumb finding another private profile takes literally 0 effort, and I really don't see the point you're trying to make there[/QUOTE] Changing my entire IP range consists of either: A) Opening a batch file B) Restarting my router Neither of these take more than 5 minutes.

[QUOTE=|FlapJack|;20819560]Changing my entire IP range consists of either: A) Opening a batch file B) Restarting my router Neither of these take more than 5 minutes.[/QUOTE] I use batch file binden to one of my G keys. And I use it for other reasons then Gmod xD

[QUOTE=|FlapJack|;20819560] B) Restarting my router [/QUOTE] yup have fun waiting for it to come up and losing any active connections (and why would you need a batch file that is pretty dumb)

[QUOTE=Soda;20819880]yup have fun waiting for it to come up and losing any active connections (and why would you need a batch file that is pretty dumb)[/QUOTE] :irony: And also, I'll trust you, my networking expert. Yes, you know my network setup better than me, of course.

[QUOTE=Soda;20819880]yup have fun waiting for it to come up and losing any active connections (and why would you need a batch file that is pretty dumb)[/QUOTE] If you haven't got a router all you need to do if you have a wireless modem is to restart your computer, Or just hit refresh or whatever on your networks thingy. (Depending on your os). Stuff that people that will be using serenity most likely knows. It's not rocket sience. The reason you'd use a batch file to renew your ip adress is because it's obviously faster than opening cmd or downloading some crappy software. And waiting for it to come up? What the hell, Should take less than like a half minute. Losing active connections? Are you downloading porn while playing? Irc, Webbrowsers and all those kinds of "Connections" can just be restarted.

The last 2-3 pages have been nothing but re-iterating that IP banning isn't perfect but is a somewhat viable solution, got it. Can we move on now?

[QUOTE=Crazy Quebec;20820429]The last 2-3 pages have been nothing but re-iterating that IP banning isn't perfect but is a somewhat viable solution, got it. Can we move on now?[/QUOTE] Summary, Ip banning doesn't work. A combination of the steam community stuff on this page will work perfectly. Who gives a shit about private profiles. Who does anything that secret in steam that they need to have a private profile? Just kick them each time they join with the message "Your steam profile is private, change it then come back". After the third retry ban the steamid. Really, If it's someone that truely cares about playing on that server, and has done so before, they can easily look up someone that plays on that server reguilarly and add them and ask them to unban. If the owners won't do it they are retards and you shouldn't be playing on the server anyway.

[QUOTE=Soda;20819880]yup have fun waiting for it to come up and losing any active connections (and why would you need a batch file that is pretty dumb)[/QUOTE] No.

[QUOTE=|FlapJack|;20819560]Changing my entire IP range consists of either: A) Opening a batch file B) Restarting my router Neither of these take more than 5 minutes.[/QUOTE] But 5 minutes is the time a griefer doesn't want to wait. That's the point. Most will get to another server instead of waiting a time more than 10+ seconds just to reset their IP. Anyway: Can we go for a solution/approach rather than "nah, this will not work"/"*scream*, we have do to something about it *scream*"-talk instead? Because that's all what this thread consists of by now.

[QUOTE=kp3;20820496]Summary, Ip banning doesn't work. A combination of the steam community stuff on this page will work perfectly. Who gives a shit about private profiles. Who does anything that secret in steam that they need to have a private profile? Just kick them each time they join with the message "Your steam profile is private, change it then come back". After the third retry ban the steamid. Really, If it's someone that truely cares about playing on that server, and has done so before, they can easily look up someone that plays on that server reguilarly and add them and ask them to unban. If the owners won't do it they are retards and you shouldn't be playing on the server anyway.[/QUOTE] uh you have no idea what you're talking about, and the steam community methods posted are all dumb ip banning is the only solution Kicking everyone with a private profile is just dumb, you clearly have no concept of management . The only legitimate method would be to check versus profile names, and kick with an ambiguous message like "no". even then that's a pretty dumb way to go about it. for those who have actually encountered serenity: Does the steamid remain the same after the auth packet is sent with a false steamid? IE, does status return the spoofed steamid?

How about, we just create an overall external login system for that steamid... that way granted there may be a new user on your server but if he went to another server with that universal external account, then it would be fine... Only downside is corrupt people fucking with those database accounts. Oh wells :/ it could work if we had the right people in charge of it.

[QUOTE=DarKSunrise;20794749]I wrote this script a few days ago. [url]http://pastebin.com/qXdsPfhk[/url] It's a serverside script that kicks (and IP-bans for two days) the player if his possibly spoofed SteamID isn't actually playing on the server. Doesn't work if the player has a private profile through, but you could just kick him and tell him to make his profile public. The code has an awful pyramid of if-statements, but just because I wanted to catch the reason of the kick while debugging. Could be easily compressed into one statement. I hope that you find this snippet useful. The XML-parser was stolen from [url]http://lua-users.org/wiki/LuaXml[/url].[/QUOTE] I modified your's a bit to make it check to see if two users have the same steamid. I don't really see any ways around it. [url]http://pastebin.com/kfD3EwUS[/url]

[QUOTE=Soda;20824830]uh you have no idea what you're talking about, and the steam community methods posted are all dumb ip banning is the only solution Kicking everyone with a private profile is just dumb, you clearly have no concept of management . The only legitimate method would be to check versus profile names, and kick with an ambiguous message like "no". even then that's a pretty dumb way to go about it. for those who have actually encountered serenity: Does the steamid remain the same after the auth packet is sent with a false steamid? IE, does status return the spoofed steamid?[/QUOTE] If you have a private profile well then maybe you shouldn't be playing steam @ all. Your obv. hiding something whatever it is that server doesn't care. At the end of the day its the hacker vs patcher. Guess what patcher doesn't care which method works. If it works then it's getting used. [QUOTE=dorfy;20826678]How about, we just create an overall external login system for that steamid... that way granted there may be a new user on your server but if he went to another server with that universal external account, then it would be fine... Only downside is corrupt people fucking with those database accounts. Oh wells :/ it could work if we had the right people in charge of it.[/QUOTE] What is this GTA SA:MP? Seriously, Nuff said. [QUOTE=huntskikbut;20827104]I modified your's a bit to make it check to see if two users have the same steamid. I don't really see any ways around it. [url]http://pastebin.com/kfD3EwUS[/url][/QUOTE] Seems to be the best thing available to the public right now.

[QUOTE=Aide;20829325] What is this GTA SA:MP? Seriously, Nuff said. [/QUOTE] I found this cool tool its called google you should try it some time

[QUOTE=huntskikbut;20827104]I modified your's a bit to make it check to see if two users have the same steamid. I don't really see any ways around it. [url]http://pastebin.com/kfD3EwUS[/url][/QUOTE] I thought that they automatically get kicked with the "This SteamID is already in use on this server" -message, so I didn't add a check for that.

[QUOTE=DarKSunrise;20831410]I thought that they automatically get kicked with the "This SteamID is already in use on this server" -message, so I didn't add a check for that.[/QUOTE] He is correct

[QUOTE=Aide;20829325]If you have a private profile well then maybe you shouldn't be playing steam @ all. Your obv. hiding something whatever it is that server doesn't care. [/QUOTE] Wow. Just wow. I can't think of anything else to say to that. I really can't.

[QUOTE=|King Flawless|;20830931]I found this cool tool its called google you should try it some time[/QUOTE] O really? Because I wasn't making a reference to a game that I've obv. played. [QUOTE=JIAC;20831784]Wow. Just wow. I can't think of anything else to say to that. I really can't.[/QUOTE] I can, this isn't my space. You shouldn't have to hide your profile. Trying not to troll is hard. I'm sure I am though. [QUOTE=DarKSunrise;20831410]I thought that they automatically get kicked with the "This SteamID is already in use on this server" -message, so I didn't add a check for that.[/QUOTE] It does, just with serenity it's different since the other is spoofing his sh*t it wouldn't kick him.

[QUOTE=DarKSunrise;20831410]I thought that they automatically get kicked with the "This SteamID is already in use on this server" -message, so I didn't add a check for that.[/QUOTE] One other thing, Line 107 should be [code]if(serverip == xml[2][13][1]) then[/code] instead of [code]if(serverip == xml[2][12][1]) then[/code] end And this is not effective on a dedicated server with multiple IP addresses. I have a patch for that if anyone is interested.

[QUOTE=huntskikbut;20832596]One other thing, Line 107 should be [code]if(serverip == xml[2][13][1]) then[/code] instead of [code]if(serverip == xml[2][12][1]) then[/code] end And this is not effective one a dedicated server with multiple IP addresses. I have a patch for that if anyone is interested.[/QUOTE] [url]http://pastebin.com/3NgGbwNy[/url] I'm bored rate me more dumb please.

Is Serenity that big of a problem..? Just manually kick/ban them once, then when they come back kick/ban them again, they arent going to keep reconnecting after a while.

It is a problem when they come in on an admins spoofed steamid. :( Thanks hunts <3

[QUOTE=Kopimi;20832938]Is Serenity that big of a problem..? Just manually kick/ban them once, then when they come back kick/ban them again, they arent going to keep reconnecting after a while.[/QUOTE] If it's someone determined to crash a server while connected (horrible method really). Then they probably will, and will probably start changing their name upon reconnect after a while.

[QUOTE=Kopimi;20832938]Is Serenity that big of a problem..? Just manually kick/ban them once, then when they come back kick/ban them again, they arent going to keep reconnecting after a while.[/QUOTE] Sir your logic is flawed. What if you have no admins on. You and your admins can't be on 24/7.

[QUOTE=Aide;20833829]Sir your logic is flawed. What if you have no admins on. You and your admins can't be on 24/7.[/QUOTE] Forgive me for my flawed logic, if only I could be as wise as you, then, and only then, would I know how to defeat Serenity.