Firewall is great but is there anything else I can do ?

[Elochai]

I have to say, the firewall is great. I just had to use it to stop a hacker in my KF servers.

But is there anything else I can do as the firewall blocks his IP, I am sure he smart enough to know how to get around that. I know I am.

Here is the issue I had, he came in aim botting, and telling some other player where he can buy the same hack. Another player told him off and he (the hacker) banned them.

So I went into admin, unban the player, banned the hacker, and changed all passwords.

The hacker was still able to unban his self and ban others again even though the admin account password is no longer the same.

Aperantly Killing Floor Admin commands can be access from hacks using memory path values. Kinda like how a trainer works.

Right now he is banned by firewall but I like to make sure he is banned by more then an IP.

Any ideas ?

It kind of pointless to add his steam ID 76561198067657972 to my ban list if he can remove it hisself.

[kraze]

It sounds like that user is using some type of exploit to gain access to the server, this could either be an exploit in KF or an exploit in a plugin you are running..

The firewall tab wasn't meant to act as ban-list so features wont be tailored to that. However, if you were to examine his traffic to the server, and saw that everytime he connected he was sending the same specific traffic, you could easily block that.

Another good option is to take a sample of the IP's he is using and apply a subnet ban. It is true that changing your Ip by using a proxy..etc is pretty easy, but what I have found is that you are limited on how many times you can successfully get a new one or get one to fully work.

Overall your best bet is to completely ignore this user, many people who become targets of attacks like this are in someway provoking the attacker. Whether they know they are or not. Cut all communication with said hacker and completely ignore him. If he comes in, immediately ban him. Most will get bored and move on.

[Elochai]

Problem is he is exploiting the game itself as he using his hack to ban players and to unban hiself.

Which is why I had to use the firewall on his IP, so far so good but if he comes back then I will do what you said, record his traffic. That way if he uses his hack, I should see the ban command he is using sent to the server right ? and block that.