L2J Server

If you want to receive support we need this info to help you properly.
» Find Revision
L2J Revision Number: 4945
L2JDP Revision Number: 8398

L2 Walker / L2 Net are back on track.
After long months of offline job, L2 Walker started again, and already lunched a new version witch can bypass l2jservers. Including with this l2j code. My friend already test it and show me screens.
We better start preventing it again

there was any prevention in the past in opensouce project ?

Yes i had l2j package from this developers, and no one could bypass at my server l2walker in game l2 net neither l2 ogg game:

# ---------------------------------------------------------------------------
# Walker/Bot protection
# ---------------------------------------------------------------------------
# Basic protection against L2Walker.
# Default: False
L2WalkerProtection = True

at l2jmods.

Hello ppl,
since somes day, auto bots come back in my server...
Ofc, protection of l2w enabled.
But, no works.
I need to check ppl all the time...
Any fix possible?

What exactly are these bots able to do? This can help alot in finding where to look to fix the situation.

for now, i only see bots for exp. They works like l2w ig.
They have a spot for wait mobs respawn. They use autobuff, go to a mob, use skill or spoil, ... when the mob die, they sweep, or pick up herbs (i have autoloot) , target a new mob, run, kill, target, run....... if they dont have mobs, they go back to the spot for wait. Some times they run on a mob, but when a mob respawn near them, they change target.

When i see a bot, i go near him, and drop 1 adena without stopping. They are configured for auto pickup, and stop hitting mobs. So mobs kill thems (stupid bot). I jail the bot, and voila.

darknessneo wrote:When i see a bot, i go near him, and drop 1 adena without stopping. They are configured for auto pickup, and stop hitting mobs. So mobs kill thems (stupid bot). I jail the bot, and voila.

Haha! good one I like that!

I'm trying to think how we could prevent these types of bots... Preventing bots from using exploits (i.e.: special skills, enchanting, creating items, etc...) is one thing. Figuring out if a player is in fact a bot would probably take up alot of resources (i.e.: randomly checking all the players fight + movement patterns, etc...).
Unless someone has another idea how this can be acchieved...
If there was something easy to check that all bots do the same, it wouldnt be hard to code some script to check that and take action when it finds a bot, but that would be only temporary since the bot creators check these forums and the code changes on svn/trac then adapt their bots accordingly.

the bots are probably L2.NET

Still, if there were some common patterns we could check for, it would be a start

A new bot jailed again.....
Bored...
Now i see: Player XXX is trying to use L2W and go kicked, but the char not kicked...
The server try to kick without success.

theone wrote:Still, if there were some common patterns we could check for, it would be a start

Checking for bot behaviour is not right approach to stop botting, the right approach is to stop them to connect with bots at all. This is possible in many ways, but I am not sharing secrets so ye . If you study bots such as the one mentioned in few posts above mine you will see how to stop it .

L2 walker working , change the attrack range to 10000 , it work will.
Even if change the MoveBackwardToLocation also can not ban it . any one ideas?

News:
a ppl said me he used l2tower

DreamStage wrote:Yes i had l2j package from this developers, and no one could bypass at my server l2walker in game l2 net neither l2 ogg game:

# ---------------------------------------------------------------------------
# Walker/Bot protection
# ---------------------------------------------------------------------------
# Basic protection against L2Walker.
# Default: False
L2WalkerProtection = True

at l2jmods.

Remember, that is only basic protection.

The current L2J core has very limited protection against bots.
As Evilus said, and I think he's 100% correct about this, most of the bot protection needs to be done when the bots are trying to connect.
To be completely honest, I really have no interest in studying the different bots and how they connect to the servers. I'd be happy to help block them if someone was to give me precise pointers as to how they connect and interact with the server (i.e.: if someone else was to study them and explain to me how they connect, etc... the actual mechanics of it).
I also think that the bot protection part of the core should be in an independant library, obfuscated, and that the source for that library should NOT be on SVN or anywhere other than the hidden L2J dev SVN (yes, for those of you who didnt know... that exists )