edg-l/ddnet
1
0
Fork 0
mirror of https://github.com/ddnet/ddnet.git synced 2024-11-10 10:08:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Spoof protection (by someone)

Browse source
This commit is contained in:
def 2014-08-13 02:00:45 +02:00
parent ab43f45c78
commit bf5fdadcd6
3 changed files with 77 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

72
src/engine/server/server.cpp
View file

@ -725,6 +725,8 @@ int CServer::NewClientCallback(int ClientID, void *pUser)
pThis->m_aClients[ClientID].m_Authed = AUTHED_NO;
pThis->m_aClients[ClientID].m_AuthTries = 0;
pThis->m_aClients[ClientID].m_pRconCmdToSend = 0;
pThis->m_aClients[ClientID].m_NonceCount = 0;
pThis->m_aClients[ClientID].m_LastNonceCount = 0;
pThis->m_aClients[ClientID].m_Traffic = 0;
pThis->m_aClients[ClientID].m_TrafficSince = 0;
memset(&pThis->m_aClients[ClientID].m_Addr, 0, sizeof(NETADDR));
@ -903,12 +905,64 @@ void CServer::ProcessClientPacket(CNetChunk *pPacket)
return;
}
m_aClients[ClientID].m_State = CClient::STATE_CONNECTING;
SendMap(ClientID);
if(g_Config.m_SvSpoofProtection)
{
//set nonce
m_aClients[ClientID].m_Nonce = rand()%5+5;//5-9
m_aClients[ClientID].m_LastNonceCount = Tick();
m_aClients[ClientID].m_State = CClient::STATE_SPOOFCHECK;
CMsgPacker Msg(NETMSG_MAP_CHANGE);
Msg.AddString("", 0);//mapname
Msg.AddInt(0);//crc
Msg.AddInt(0);//size
SendMsgEx(&Msg, MSGFLAG_VITAL|MSGFLAG_FLUSH, ClientID, true);
}
else
{
m_aClients[ClientID].m_State = CClient::STATE_CONNECTING;
SendMap(ClientID);
}
}
}
else if(Msg == NETMSG_REQUEST_MAP_DATA)
{
if(g_Config.m_SvSpoofProtection)
{
if(m_aClients[ClientID].m_State == CClient::STATE_SPOOFCHECK)
{
int Chunk = Unpacker.GetInt();
if(m_aClients[ClientID].m_NonceCount != Chunk || m_aClients[ClientID].m_LastNonceCount+TickSpeed() < Tick())//wrong number sent
m_NetServer.Drop(ClientID, "Kicked by spoofprotection. Please try again!");
m_aClients[ClientID].m_LastNonceCount = Tick();
if(m_aClients[ClientID].m_NonceCount != m_aClients[ClientID].m_Nonce)
{
CMsgPacker Msg(NETMSG_MAP_DATA);
Msg.AddInt(0);//last
Msg.AddInt(0);//crc
Msg.AddInt(m_aClients[ClientID].m_NonceCount);//chunk
Msg.AddInt(1);//size
Msg.AddRaw("a", 1);//data
SendMsgEx(&Msg, MSGFLAG_VITAL|MSGFLAG_FLUSH, ClientID, true);
m_aClients[ClientID].m_NonceCount++;
}
else//done. continue as usual
{
m_aClients[ClientID].m_State = CClient::STATE_POSTSPOOFCHECK;
dbg_msg(0, "done");
}
return;
}
else if(m_aClients[ClientID].m_State == CClient::STATE_POSTSPOOFCHECK)
{//Too many noncenumbers sent
m_NetServer.Drop(ClientID, "Kicked by spoofprotection. Please try again!");
return;
}
}
if(m_aClients[ClientID].m_State < CClient::STATE_CONNECTING)
return; // no map w/o password, sorry guys
@ -1369,6 +1423,20 @@ void CServer::PumpNetwork()
m_ServerBan.Update();
m_Econ.Update();
if(g_Config.m_SvSpoofProtection)
{
for(int i = 0; i < MAX_CLIENTS; i++)
{
if(m_aClients[i].m_State == CClient::STATE_POSTSPOOFCHECK)
//if(m_aClients[i].m_State == CClient::STATE_POSTSPOOFCHECK &&
// m_aClients[i].m_LastNonceCount+TickSpeed() < Tick())
{ // when the time is over: continue joining process
m_aClients[i].m_State = CClient::STATE_CONNECTING;
SendMap(i);
}
}
}
}
char *CServer::GetMapName()

6
src/engine/server/server.h
View file

@ -98,6 +98,8 @@ public:
STATE_EMPTY = 0,
STATE_AUTH,
STATE_CONNECTING,
STATE_SPOOFCHECK,
STATE_POSTSPOOFCHECK,
STATE_READY,
STATE_INGAME,
@ -136,6 +138,10 @@ public:
int m_Authed;
int m_AuthTries;
int m_Nonce; // number to reach
int m_NonceCount; // current num
int64 m_LastNonceCount;
const IConsole::CCommandInfo *m_pRconCmdToSend;
void Reset();

1
src/engine/shared/config_variables.h
View file

@ -296,6 +296,7 @@ MACRO_CONFIG_INT(SvSpamMuteDuration, sv_spam_mute_duration, 60, 0, 3600 , CFGFLA
MACRO_CONFIG_INT(SvEvents, sv_events, 1, 0, 1, CFGFLAG_SERVER, "Enable triggering of server events, like the happy eyeemotes on some holidays.")
MACRO_CONFIG_INT(SvRankCheats, sv_rank_cheats, 0, 0, 1, CFGFLAG_SERVER, "Enable ranks after cheats have been used (file based server only)")
MACRO_CONFIG_INT(SvSpoofProtection, sv_spoof_protection, 0, 1, 1, CFGFLAG_SERVER, "Enable spoof protection")
// netlimit
MACRO_CONFIG_INT(SvNetlimit, sv_netlimit, 0, 0, 10000, CFGFLAG_SERVER, "Netlimit: Maximum amount of traffic a client is allowed to use (in kb/s)")