[Help]Hacker protection

If something doesn't fit in any other forum then post it here.
Forum rules
READ NOW: L2j Forums Rules of Conduct
Post Reply
LoRDCaRLoS
Posts: 13
Joined: Sun Feb 13, 2011 3:03 am

[Help]Hacker protection

Post by LoRDCaRLoS »

If you want to receive support we need this info to help you properly.
» Find Revision
L2J Revision Number:4497
L2JDP Revision Number:7780

how can i protect mi server from hackers.
my database has a password.
but hackers edit items, write gm messages, and create gm chars whit out the gm accesslevel
User avatar
LasTravel
Posts: 888
Joined: Tue Jan 05, 2010 12:08 am
Location: Spain

Re: [Help]Hacker protection

Post by LasTravel »

Close your server.

Or, your website probably sucks and have any way to acces your bd.
User avatar
badboy29
Posts: 417
Joined: Fri Apr 24, 2009 5:34 am
Location: Brazil

Re: [Help]Hacker protection

Post by badboy29 »

LoRDCaRLoS wrote:If you want to receive support we need this info to help you properly.
» Find Revision
L2J Revision Number:4497
L2JDP Revision Number:7780

how can i protect mi server from hackers.
my database has a password.
but hackers edit items, write gm messages, and create gm chars whit out the gm accesslevel
With some brute force attack is possible break passwords and your server will be fucked :lol:

I recommend you set strong password, database permissions properly and will be fine :wink:
Aka UnHoly
Starter
Posts: 484
Joined: Sat Jan 23, 2010 4:42 pm

Re: [Help]Hacker protection

Post by Starter »

Don't use "root" as username and maybe not "1234" as password..

And besides that forbid remote mysql database usage..
Last edited by Starter on Sat May 12, 2012 8:28 pm, edited 1 time in total.
I have promises to keep and miles to go before I sleep.
User avatar
Micr0
Posts: 119
Joined: Sun Sep 05, 2010 5:44 pm

Re: [Help]Hacker protection

Post by Micr0 »

change you User name on mysql a program mysql brute need only ip / user name to decode you password you use default user name "Root" and verry easy to decode you password "Don't Use >Root< User Name"
User avatar
Szponiasty
Advanced User
Advanced User
Posts: 557
Joined: Mon Apr 21, 2008 1:31 pm
Location: Eastern Poland

Re: [Help]Hacker protection

Post by Szponiasty »

Limit network access to database server, to be allowed only by your homepage server and your home PC. You can do that within MySQL table "user" (database mysql). Additionally add firewall rules to block all incomming connections on port 3306 (except for connections from your home page server IP, game/login server IP, and eg. your home PC IP). Also check your homepage code for eg. mysql injection vulnerability (thats probably most likely the source of "hacks") :)
And in the next chronicle they went into space, fighting the evil empire... In a galaxy far, far away xD
Starter
Posts: 484
Joined: Sat Jan 23, 2010 4:42 pm

Re: [Help]Hacker protection

Post by Starter »

Szponiasty wrote:Limit network access to database server, to be allowed only by your homepage server and your home PC. You can do that within MySQL table "user" (database mysql). Additionally add firewall rules to block all incomming connections on port 3306 (except for connections from your home page server IP, game/login server IP, and eg. your home PC IP). Also check your homepage code for eg. mysql injection vulnerability (thats probably most likely the source of "hacks") :)
Personally I wouldn't graduate the most guys that high as the most guys try the simplest things ever and that is bruteforcing. :)
I have promises to keep and miles to go before I sleep.
User avatar
Szponiasty
Advanced User
Advanced User
Posts: 557
Joined: Mon Apr 21, 2008 1:31 pm
Location: Eastern Poland

Re: [Help]Hacker protection

Post by Szponiasty »

Bruteforcing is of no use, when server actively rejects network connections from IP's out of "allowed" list ;)
And in the next chronicle they went into space, fighting the evil empire... In a galaxy far, far away xD
User avatar
Zoey76
L2j Inner Circle
L2j Inner Circle
Posts: 7008
Joined: Tue Aug 11, 2009 3:36 am

Re: [Help]Hacker protection

Post by Zoey76 »

Szponiasty wrote:Bruteforcing is of no use, when server actively rejects network connections from IP's out of "allowed" list ;)

Agreed, but Starter meant that "15yo hackers" try the simplest way, like bruteforce :lol:
Powered by Eclipse 4.34 🌌 | Eclipse Temurin 21 ☕ | MariaDB 11.3.2 🗃️ | L2J Server 2.6.3.0 - High Five 🚀

🔗 Join our Discord! 🎮💬
Post Reply