Forum

Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 39
  1. #16
    Join Date
    April 2011
    Location
    Germany
    Posts
    1,266
    This would just mean three or four more lines... but I (personaly) see no use in registering a server to more than one viewer.

  2. #17
    Join Date
    October 2011
    Posts
    33
    Quote Originally Posted by Barungar View Post
    This would just mean three or four more lines... but I (personaly) see no use in registering a server to more than one viewer.
    Extra advertisement ?

  3. #18
    Join Date
    December 2013
    Posts
    14
    I did simple thing, found IP address-es of TS3 scanners, allow them and disallow everything else, so GameTracker, TS viewer etc can scan my server

  4. #19
    Join Date
    December 2013
    Posts
    14
    IPs of GameTracker, TS3 Viewer and i ask for IP TS3index (they said they will upgrade soon, so they will have new/another IP)

    TS3 Scans ip list:
    85.25.120.233
    208.167.241.190
    208.167.241.185
    208.167.241.186
    108.61.78.147
    108.61.78.148
    108.61.78.149
    108.61.78.150
    62.75.222.14

    - you can allow them, and disallow everything else in firewall

  5. #20
    Join Date
    April 2013
    Posts
    42
    Quote Originally Posted by wUFr0 View Post
    IPs of GameTracker, TS3 Viewer and i ask for IP TS3index (they said they will upgrade soon, so they will have new/another IP)

    TS3 Scans ip list:
    85.25.120.233
    208.167.241.190
    208.167.241.185
    208.167.241.186
    108.61.78.147
    108.61.78.148
    108.61.78.149
    108.61.78.150
    62.75.222.14

    - you can allow them, and disallow everything else in firewall
    Can you send all the commands to add and block so that there is no mistake. TY

  6. #21
    Join Date
    May 2010
    Location
    Verona - Italy
    Posts
    122
    Quote Originally Posted by skinhead View Post
    Can you send all the commands to add and block so that there is no mistake. TY
    Code:
    iptables -A INPUT -p tcp --dport 10011 -j DROP
    iptables -I INPUT -p tcp -s 85.25.120.233 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 208.167.241.190 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 208.167.241.190 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 208.167.241.185 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 208.167.241.186 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 108.61.78.147 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 108.61.78.148 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 108.61.78.149 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 108.61.78.150 --dport 10011 -j ACCEPT
    iptables -I INPUT -p tcp -s 62.75.222.14 --dport 10011 -j ACCEPT
    You can send all with a unique command using a ; between each row.

    "iptables -L" to see all rules.
    "iptables -D INPUT 1" to delete the rule number 1, etc.
    Last edited by Kaosvf; December 17th, 2013 at 09:15 PM.

  7. #22
    Join Date
    December 2013
    Posts
    14
    not sure if thats care but i have "drop" at the end

  8. #23
    Join Date
    April 2011
    Location
    Germany
    Posts
    1,266
    Quote Originally Posted by wUFr0 View Post
    not sure if thats care but i have "drop" at the end
    That's not good... It would implicate that the ACCEPTs above would actualy work. Giving DROP as the first will ensure that no ACCEPT given thereafter could have any negative effect ... like working.

  9. #24
    Join Date
    June 2012
    Location
    Portugal
    Posts
    317
    I already posted the solution like 1 month ago in a thread:

    Go to Tools-> List all clients.
    In the Unique ID search for ServerQuery.

    Remove the message & poke related permissions. (set to -1)

    ServerQuery UID is shared among all ServerQuery guests.

  10. #25
    Join Date
    May 2010
    Location
    Verona - Italy
    Posts
    122
    Quote Originally Posted by wUFr0 View Post
    not sure if thats care but i have "drop" at the end
    This is what I said using iptables: "Reject all addresse except these that you must accept".

    Quote Originally Posted by barricas View Post
    I already posted the solution like 1 month ago in a thread:

    Go to Tools-> List all clients.
    In the Unique ID search for ServerQuery.

    Remove the message & poke related permissions. (set to -1)

    ServerQuery UID is shared among all ServerQuery guests.
    I don't think that it's usefull because, as said here after the server selection the permissions aren't anymore of the ServerQuery but of Guests.

  11. #26
    Join Date
    April 2011
    Location
    Germany
    Posts
    1,266
    Quote Originally Posted by Kaosvf View Post
    This is what I said using iptables: "Reject all addresse except these that you must accept".
    And the first part will work, the second not. iptables is organized in so called "chains", this are ordered sets of rules. Those chains will be processed sequentially from lowest rule id to highest rule id. Your example in post #21 will result in a low id for the DROP rule. You must also know the processing of a chain will be stoped as soon as a rule matches.

    Because your DROP rule is a universal fit for tcp traffic to port 10011 the following ACCEPT rules will never be processed. So you need to specify them because they will not be used. You need to give the ACCPET rules before the DROP rule in a chain.

  12. #27
    Join Date
    May 2010
    Location
    Verona - Italy
    Posts
    122
    Quote Originally Posted by Barungar View Post
    And the first part will work, the second not. iptables is organized in so called "chains", this are ordered sets of rules. Those chains will be processed sequentially from lowest rule id to highest rule id. Your example in post #21 will result in a low id for the DROP rule. You must also know the processing of a chain will be stoped as soon as a rule matches.

    Because your DROP rule is a universal fit for tcp traffic to port 10011 the following ACCEPT rules will never be processed. So you need to specify them because they will not be used. You need to give the ACCPET rules before the DROP rule in a chain.
    Sorry but it's tested and works, why?
    If you read the command I wrote "iptables -A" (APPEND) for the -j DROP and "iptables -I" (INSERT) for -j ACCEPT. Then the order of rules is correct and works.

  13. #28
    Join Date
    April 2011
    Location
    Germany
    Posts
    1,266
    Sorry, your're right.

    I didn't look carefully enough. Normally I write my iptables rules free from my mind, and as a rule of hand it is best practise to state an ACCEPT rule before the DROP rule. I also use mostly only -A myself.

  14. #29
    Join Date
    May 2010
    Location
    Verona - Italy
    Posts
    122
    Quote Originally Posted by Barungar View Post
    Sorry, your're right.

    I didn't look carefully enough. Normally I write my iptables rules free from my mind, and as a rule of hand it is best practise to state an ACCEPT rule before the DROP rule. I also use mostly only -A myself.
    Every day is good to learn something, you are welcome

  15. #30
    Join Date
    June 2012
    Location
    Portugal
    Posts
    317
    Quote Originally Posted by Kaosvf View Post
    This is what I said using iptables: "Reject all addresse except these that you must accept".



    I don't think that it's usefull because, as said here after the server selection the permissions aren't anymore of the ServerQuery but of Guests.
    It worked for me. Guests can send PMs but Guest query can't.

    Remember that I'm not saying that they are in the ServerQuery group but the ServerQuery UID.

    Test yourself. You will see that all server query guests enter with that UID.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Someone spamming me
    By MasterShake in forum Server Support
    Replies: 1
    Last Post: January 16th, 2015, 08:00 AM
  2. Game-State constantly spamming my TS3 server.
    By DreLVMPD in forum Windows
    Replies: 2
    Last Post: April 24th, 2014, 07:47 PM
  3. Replies: 1
    Last Post: June 1st, 2011, 11:33 PM
  4. Please stop spamming...
    By C4BR3R4 in forum Client Support
    Replies: 4
    Last Post: March 12th, 2010, 11:30 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •