*DAMN R6 Forum

*DAMN R6 Community => *DAMN Battle League(*DBL) => Topic started by: Acri on November 20, 2003, 11:56:01 am



Title: I am attacked
Post by: Acri on November 20, 2003, 11:56:01 am
Due to recent attacks of a guy hacking my computer, I am afraid I can't participate in the upcoming ladder.
The attacks have so far involved:
Replacing commands maps with gay pornography.
Editing kits so that, on my server, kits are better than usual. (M4 has OICW+ scope)
Connecting to my netfone while I am in a game and screaming at me.

I have my suspicions on who this might be, but until I have proven it, I won't accuse anyone. But I just can't play with gay porn instead of command maps and I can't stand having modified kits, as it is cheating. I am a fair sportsman and I therefor confess that these alterations have taken place. Until my problems are solved, my host is to be considered unacceptable for clan battles.



Title: Re:I am attacked
Post by: th.Sentinel on November 20, 2003, 12:10:44 pm
There have been some portscans on my comp aswell lately.

It apears to be a guy living near Renston (or something like that) in Virginia. I've traced his route, but he could be using a false proxy...

Good thing i've got a firewall and netbarrier to track and block all portscans and attacks.


Title: Re:I am attacked
Post by: Acri on November 20, 2003, 12:15:23 pm
I think it is easirt than that. Due to some personal projects, I used to have my appleshare open and I am afraid that somehow the pass has gotten our/gotten hacked. I have been forced to turn my appleshare off, and that is very bad for my LAN and my project buddies in school.


Title: Re:I am attacked
Post by: BTs_FahQ2 on November 20, 2003, 03:27:18 pm
lol, yeah I get the same shit here too.  But little do these fucktards know is that I am at work.  So my IT department is just tracking you until you do something really stupid.

God I hope you read this message you asshole.  My company does contracts with the U.S. government which means if you fuck with us, they take it personally.  So work your way to a federal charge you asshole.  And stop making my IT department come over and complain to me about port scans and attempts at hitting my firewall.

We will get you when you try to cause damage.  Right now we are just laughing at you.


Title: Re:I am attacked
Post by: crypt on November 20, 2003, 09:03:01 pm
Do you think it's someone on GR, or just some random fuck pussy hacker guy?


Title: Re:I am attacked
Post by: Noto on November 20, 2003, 09:23:50 pm
I thought in this age of computer wizardry and technology, hacking was nearly a thing of the past, IF you know how to prevent it from happening to you.

I know many of us have our IP's just floating around out there, andthat can be scary.  Try resetting your IP, and then configure your firewall only to allow certain ports to be accessed.  Acri, it sounds like you either have your firewall completely off, or on and allowing everything to be accessed.  Have you tried configuring your firewall for specific ports yet?  Also, in regards to passwords and such.  Just create new user names and passwords.  I would also suggest getting some sort of scan log to see when and where these hacks are coming from.  You can only mask your location to a certain point.  It's still possible to find them.

I would also suggest asking Fridge for help on this.  He knows how to make GR think he is somewhere when he is not.  Maybe your attacker is using this same technology?  Anywhoo, ask Fridge for some help on this when he's around.  I'm sure he could give you some advice.

Meanwhile, talk to you IT guys at school or work to see if they can set something up for you.  If you are simply on a LAN, then it's someone on your network, not the Internet.  If that LAN is hooked to the Internet, then close it all down, make new names and passwords, configure your firewall, and get some scan logging software.

.::|N| Noto

P.S.  Does anyone know if Panther has scan logging software built in?  I know the |MP| are able to see who is pinging them or port scanning them.  Can someone help out the community with this vital information?


Title: Re:I am attacked
Post by: Acri on November 20, 2003, 09:38:53 pm
Crypt, yes it is someone on GameRanger. Why else would he go directly to Ghost Recon and netfone?

Noto: Yes my firewall is off, and I want it to remain that way. I am going to find that guy and make sure he never plays on this league again. Editing someone's kits and command maps is cheating and the worst form of cheating I have encountered so far.


Title: Re:I am attacked
Post by: Noto on November 20, 2003, 09:46:08 pm
Noto: Yes my firewall is off, and I want it to remain that way.

Acri, you can enable your firewall, and still allow traffic on specific ports.  Enabling your firewall would disallow access to things like... oh let's say... your computer files?  NF and such might still be open to harrassment, but at least other sensative files could remain safe.  

.::|N| Noto


Title: Re:I am attacked
Post by: Fridge! on November 20, 2003, 09:56:56 pm
noto, i know nothing on this matter, your location is a completely different matter.  I really don't know jack shit about computers, never come to me for a computer problem.


Title: Re:I am attacked
Post by: Jeb on November 20, 2003, 10:10:58 pm
Why is your firewall off Acri? That just says "hack me"
I recommend using netbarrier 10.3.x its by far the best firewall for mac, and yes you can allow traffic to the ports used by netfone and ghr if you want to, however it isn't needed unless you want to host.

You also should change your password on your computer. Keep your admin password different than any other password you use.

Another good tool to use if your worried would be Little snitch
(http://www.versiontracker.com/dyn/moreinfo/macosx/17642) its a outgoing traffic monitor. Every time a program wants to connect to something outside the computer, it refers to a set of rules you set up, that is if you think you have trojan.

I sit behind a hardware firewall, and then have software firewalls on my computers. Two levels of protection.

Noto, there are various ways of making gr think your somewhere you aren't, in fridges case he is setting the clock back on his computer and restarting gameranger. You could use a socks proxy, or use an outside computer for such things, but that isn't very easy.

There is a tool called snort that ace was using to figure out who to ban from the servers even after they left. However firewalls such as netbarrier do the same thing.


Title: Re:I am attacked
Post by: Acri on November 20, 2003, 10:13:36 pm
I know that's a lie fridge. You do know jack shit. It's your alter ego.


Title: Re:I am attacked
Post by: Fridge! on November 20, 2003, 10:45:45 pm
 Acri, how about you don't make statements with no backing, they've caused enough shit in season 5 to our clan.  Sorry to disappoint you but I am nowhere near to a computer whiz, ask anybody who plays with me and talks with me regularly on netfone.  I need to be walked though almost everything that falls outside of point and click.  I don't see why people say that I know a lot about computers, where does this come from, and where is there anything to suggest that I do?  More so, if I did know a lot about computers why would I attempt to conceal this fact?  I'm fucking sick of your inane notions.  

Gah, you're such a dumbass acri, i can think of the quickest most simplistic and complete resolve to your situation, but I don't feel like voicing it to your ignorant ass.


Title: Re:I am attacked
Post by: th.Sentinel on November 20, 2003, 11:10:42 pm
Acri I would do like Jeb says, put on the firewall of your router, search on the internet what ports you need to open for the specific programs... open them on your router. Install netbarrier, its the best tool on the market for the moment, I have it. (and its not that expensive)
Configure the firewall again, and probs are solved.

You can put a log on all incoming and outgoing traffic from your comp. I use all the utilities possible. Whenever someone port scans my comp, he will be blocked immediatly, his ip is recorded and logged. I receive an email @ work to see who just attacked me.

When I'm back home, I can trace his route with netbarrier, it evens points out the city where the hacker lives. That way you can contact his ISP if it happens often, or just ban him on Ghost Recon.
And it has lots more goodies.

If you wanna be safe against hackers just use your firewalls and open the specific ports. It will still work, and you're much safer.


Title: Re:I am attacked
Post by: |MP|Buccaneer on November 21, 2003, 12:38:58 am
Acri, just find Ace, Jeb or I online and we can help you shore up your system.  I've pissed off my share of people here, and a few of them have attempted to hack into my system.  But as long as you aren't hosting a service that's open to the public, you can block anyone.

I wouldn't worry about the port scans.  I get a few of those every day (and the firewall just block their IP after the second port).  

Netfone is another matter.  But the best thing about it is that when they connect to your NetFone, you have their IP right there.  Take it and fight back.  =D




Title: Re:I am attacked
Post by: BFG on November 22, 2003, 02:27:04 am
Well buccs really said it. Port scans happen - i get a few now and then. Perhaps it might be worth your while to dig into your terminal and get your firewall a little more effective (presuming your using osx)
there are utilites around which will warn you when your ports are bing scanned and give you the ip... perhaps if your feelfing friendly find yourself a lovely bug and send them a present :0)


Title: Re:I am attacked
Post by: *DAMN Hazard on November 22, 2003, 02:31:34 am
Could you PM me the link either on here or on GR for the app that checks for port scans and gives you their IP?

Thx,

Hazard


Title: Re:I am attacked
Post by: Jeb on November 22, 2003, 05:28:16 am
Could you PM me the link either on here or on GR for the app that checks for port scans and gives you their IP?

Thx,

Hazard
its called a firewall hazard, aka netbarrier.


Title: Re:I am attacked
Post by: |MP|Buccaneer on November 22, 2003, 06:52:53 am
http://www.intego.com/netbarrier/home.html

That's the one that's considered best for Mac right now.  Great security, easy to use.


Title: Re:I am attacked
Post by: Kill! Kill! on November 22, 2003, 11:24:43 am
I tried instaling netbarrier on Panther server and got kernel panics on startup until I booted from disk and trashed the startup files and eventually uninstalled Netbarrier--bah!


Title: Re:I am attacked
Post by: BTs_Lee.Harvey on November 22, 2003, 11:27:59 am
Im using norton personal firewall.. but in panther it does not logg access atempts.. norton need to up date it.. but it works great.. and you can block specific ip's from joining specific ports so if you have someone who is nfing you to death you can block there ip from the port that nf uses and they can still play in your games b/c there ip wont be blocked on the other ports.


Title: Re:I am attacked
Post by: th.Sentinel on November 22, 2003, 06:07:18 pm
The fact that you get those errors is because you didn't update netbarrier.

I had the same prob in panther, untill you update it, it will force quit itself.
I bought the version when I bought Panther, it was specially optimized, but there was allrdy a newer update available.

So just check for updates when you get errors and force quits.

Sent


Title: Re:I am attacked
Post by: BFG on November 22, 2003, 06:30:49 pm
yep Hazard sorry i was reffering to netbarrier like bucc said (among others). Netbarrier is unblievably easy to use and extreamly effective... Netbarrier dosn't cost much and if your worried about your computers security i would strongly advise it.


Title: Re:I am attacked
Post by: [one] Gambit on November 22, 2003, 08:08:33 pm
I am by no means a UNIX head, or  even that comfortablein the terminal, but I did a google search on the phrase 'Macintosh OS X terminal port scan logging' and got a ton of stuff. Here's an an exmaple:

http://www.macosxhints.com/article.php?story=20020710081854599

basically, a desktop portscan detection alert which will trach/display portsans in realtime.

macosxhints.com is a great resource in general, if you've never been there.

Acri- thanks for bringing this to everyone's attention. Asa long-time mac user, I've gotten lazy about security over the years... this was a great wake-up call!

Good  luck and get back soon.


Title: Re:I am attacked
Post by: BFG on November 23, 2003, 01:36:42 am
Yeah gambit MacOSXhints rocks. More information on that website than most people can digest in a lifetime. If your keen on delving behind the OS GUI then they have some excellent tutorials in dabbling in the terminal etc


Title: Re:I am attacked
Post by: Saberian 3000 on November 25, 2003, 04:31:30 am
Shit, this is interesting stuff, ou guys should sell this stuff for a loiving cause I'm getting it asap.  thanks for the tips.

+MOD+Saberian


Title: Re:I am attacked
Post by: pink rat on November 26, 2003, 10:55:35 am
I've been hacked too
My oicw gets a sniper scope now

we are targetting =x


Title: Re:I am attacked
Post by: =wL= Femme on November 27, 2003, 03:06:12 pm
I tried instaling netbarrier on Panther server and got kernel panics on startup until I booted from disk and trashed the startup files and eventually uninstalled Netbarrier--bah!

You're installing the X3 version, which needs a "safe startup" afterwards (holding the shift key down), so you can next install the NetBarrier update 10.3.1 immediately afterwards.

After that, and regular startup, both your computer and NetBarrier will work fine.


Title: Re:I am attacked
Post by: BFG on December 06, 2003, 01:44:40 pm
Heh thats interesting. I didn't get anything like that with Netbarrier... wonder why


Title: Re:I am attacked
Post by: th.Sentinel on December 06, 2003, 09:56:34 pm
There's a new release of netbarrier out: 10.3.2

It fixes problems in panther with startup and crashes.

It's a good update because now my G5 starts up immediatly without crashing first.

The problems only occur in panther BFG mb you're still on jaguar...

th.Sent


Title: Re:I am attacked
Post by: |MP|Buccaneer on December 07, 2003, 07:51:44 pm
I had the problem of the Kernel Panics on only one machine, And that's because I loaded the old version on it after loading Panther.  Just load the latest version of NetBarrier after you load Panther (assuming you did a complete wipe and install) and you'll be fine.


Title: Re:I am attacked
Post by: Ethion on December 08, 2003, 05:05:30 pm
Im using norton personal firewall.. but in panther it does not logg access atempts.. norton need to up date it.. but it works great.. and you can block specific ip's from joining specific ports so if you have someone who is nfing you to death you can block there ip from the port that nf uses and they can still play in your games b/c there ip wont be blocked on the other ports.

There are a update coming up :)

I think Norton is very good. You can see log files, and open just the port you want. And you can let specific ip get access to the ports.

---

Maybe it's the Evil PC users that want revenge ? :P Because we are taking back the computer market ;) And that we might have better players :)