Is A Ns Server Safe?

nederlandernederlander Join Date: 2003-01-06 Member: 11911Members
<div class="IPBDescription">about safety</div> my father keeps denying me of my own NS server:angry: because he says its not safe, he also says it opens ports for hackers and that we might aswel hang out a sighn that says welcome hackers...

is he right?

or can i send a bunch of <!--emo&::onos::--><img src='http://www.unknownworlds.com/forums/html/emoticons/tiny.gif' border='0' valign='absmiddle' alt='tiny.gif'><!--endemo--> after him

Comments

  • [WHO]Them[WHO]Them You can call me Dave Join Date: 2002-12-11 Member: 10593Members, Constellation
    edited January 2003
    1. It's not 100% safe, but safe enough that you're more likely to get hit by a bus than come to harm from the server.
    2. It doesn't "open up ports" it listens on exactly 1 port (mebbe 2 for like server listings or something) and doesn't provide a hacker-useful service of any kind. So, if you're not behind a firewall then you're ALREADY open for hackaging, but if you aren't, you can simply open the 1 port needed for halflife on udp and not have to worry about getting hacked at all.
    3. unless your computer holds some super valuable information and everyone knows about it, I wouldn't really worry about being hacked even if you opened all your ports (if firewalled) because for the most part it takes too damn long to do anything useful. The only thing I would secure is any network shared folders you have and make them read-only or even passworded, other than that there isn't much to fear.
  • Suicide_RunSuicide_Run Join Date: 2002-12-17 Member: 10939Members
    hint: even without open ports and even if you have a firewall yoru still
    suceptible (spelling?) to hackers

    there are ways to bypass most systems.....

    (no one is really safe)
  • SuicideDogSuicideDog Join Date: 2002-11-10 Member: 8104Members
    edited January 2003
    At my last company my boss sent me a email asking me to find a way to secure out private network from the internet. He had two conditions, he wanted it cheap and unhackable. He also wanted me to write up a procedure for it's implementation. I replied with this:

    Boss x,

    I've found it!! It's the only firewall I could find that fit into the budget you gave me, but it's happens to be the most secure way to prevent hackers!

    Step 1: Get a pair of these
    <img src='http://www.clansid.org/hostedpics/wirecut.jpg' border='0' alt='user posted image'>

    Step 2: Apply ample pressure to grip of tool while wire for internet connection is between cutting edges of tool.

    He then decided to raise the budget for the firewall equipment. And to this day I think he still has a printed copy of this email tacked to his wall.
  • Suicide_RunSuicide_Run Join Date: 2002-12-17 Member: 10939Members
    oh my god thats going in my favorites... thats freaking funny
  • Grimm_SpectorGrimm_Spector Join Date: 2002-11-01 Member: 3309Members, Constellation
    <!--QuoteBegin--[WHO]Them+Jan 20 2003, 07:54 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> ([WHO]Them @ Jan 20 2003, 07:54 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->
    2. It doesn't "open up ports" it listens on exactly 1 port (mebbe 2 for like server listings or something) and doesn't provide a hacker-useful service of any kind. So, if you're not behind a firewall then you're ALREADY open for hackaging, but if you aren't, you can simply open the 1 port needed for halflife on udp and not have to worry about getting hacked at all.
    <!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->
    It opens up a couple ports for rcon that aren't normally used by your computer.

    Plus it listens on whatever port you set it to 27015 usually and 27005 for client connects and such. Plus you also have an encrypted port open to the master server.

    But he's right, your more likely to get hit by a bus than have it exploited, as long as you run it in a protected directory, just like any other server.

    Grimm Spector <!--emo&::skulk::--><img src='http://www.unknownworlds.com/forums/html/emoticons/skulk.gif' border='0' valign='absmiddle' alt='skulk.gif'><!--endemo-->
  • [WHO]Them[WHO]Them You can call me Dave Join Date: 2002-12-11 Member: 10593Members, Constellation
    edited January 2003
    rcon uses the same port that the server runs on, so that's not an extra port

    and I'm pretty sure that it *wants* to listen on more ports for like server listings, but 27005 isn't required at all, on my router at home I only open up 27017 on udp for my server and it seems to work 100% except for the halflife server browser usually doesn't report it.
  • cracker_jackmaccracker_jackmac Join Date: 2002-11-04 Member: 6891Members, Constellation, Reinforced - Shadow
    Just don't be stupid (running it as an admin or root)

    chmod the directory to read only.


    <a href='http://attrition.org/~bronc/linux2.txt' target='_blank'>http://attrition.org/~bronc/linux2.txt</a> is a GREAT text on security. No security paper is ever complete, but this one is good. (these can be applied to doze machines as well)
  • SuicideDogSuicideDog Join Date: 2002-11-10 Member: 8104Members
    27005 will be needed if you want to have your server listed like Them said, but keep in mind that if NS starts using VAC then I believe it also uses that port for the security module update.
  • [WHO]Them[WHO]Them You can call me Dave Join Date: 2002-12-11 Member: 10593Members, Constellation
    edited January 2003
    I don't actually know for sure, but I thought that they would have used an outgoing tcp connection for that since udp isn't exactly known for it's file sending friendliness
Sign In or Register to comment.