Official Won Dlfile Exploit Fix!

Andyonce

From the hlds_announcement list:
<!--QuoteBegin--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->We have released an update to the 4.1.1.1/3.1.1.1 series of the HL
server. This update can be applied to any version of the 4.1.1.1 series
to get it up to date.

The update can be downloaded from:

via BitTorrent
<a href='http://www.steampowered.com/bittorrent/hlds4111e_beta.exe.torrent' target='_blank'>http://www.steampowered.com/bittorrent/hld...eta.exe.torrent</a>
<a href='http://www.steampowered.com/bittorrent/hlds_l_3111e_update.tar.gz.torrent' target='_blank'>http://www.steampowered.com/bittorrent/hld....tar.gz.torrent</a>

or via ftp
ftp.valvesoftware.com
Login: hlserver
Password: hlserver
Directory: x.1.1.1/Win32 or x.1.1.1/Linux

md5sum information:
f81c50fe8d6a7a8914403697c719b824  hlds4111e_beta.exe
79baaaf4b3c7902928047f30917dc635  hlds_l_3111e_update.tar.gz


Changes/Additions:
------------------
* Added list of file extensions that cannot be downloaded with the
dlfile command. The exclude list is currently: .cfg .ini .bat .exe .vbs
.com .dll .lst .log.  This prevents the published dlfile exploit.

Bug Fixes:
----------
* Fixed incorrect time base being used for client prediction on server.

----------

Just a quick reminder, DO NOT apply this over a Steam install. This is
ONLY for WON (CS 1.5) servers.

- Alfred<!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->

At last <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif'><!--endemo-->

Rotten_Flesh

Here's a mirror: <a href='http://www.3dgamers.com/dl/games/halflife/hlds4111e_beta.exe.html' target='_blank'>http://www.3dgamers.com/dl/games/halflife/...e_beta.exe.html</a>

Qwerty

yay? but doesnt 3111 have problems with ns
*dies

Vadakill

The only issue that 3.1.1.1 has with NS is that it takes quite a bit more CPU power to run it vs the 3.1.1.0 version. The official 3.1.1.1e version announced above fixed a few of the exploits however there is no version to fix the 3.1.1.0 problems.

The solution some people have come up with is a wrapper for the hlds 3.1.1.0 binary to filter out offending commands. You can find this wrapper here:

<a href='http://site.3dwire.net/code/dlfile-boffix_1.3.zip' target='_blank'>http://site.3dwire.net/code/dlfile-boffix_1.3.zip</a>

Qwerty

would that bofix be part of the problem why my metamod aint working? -_-

Rotten_Flesh

/me unwraps the fix and tastes.

Eww this is digusting candy <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif'><!--endemo-->

Vadakill

<!--QuoteBegin--Qwerty+Dec 27 2003, 06:38 PM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Qwerty @ Dec 27 2003, 06:38 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> would that bofix be part of the problem why my metamod aint working? -_- <!--QuoteEnd--> </td></tr></table><span class='postcolor'> <!--QuoteEEnd-->
I have adminmod and metamod working fine on my system and I use the boffix patch on 3.1.1.0c HLDS.

Qwerty

man this is **** me off metamod im using SAME exact config as before on linux
but the instant i add a plugin besides stuck or whichbot it crashes/plugin never loads
and i doubt it has to do anything with i386.so or i686.so at the end? thats the only diffrence i see
This started happening right after we got a virus on our server and had to get it reformated
then servermatrix reinstalled linux

Vadakill

All intel and AMD based processors are compatible with i386; only the next gen processors such as Pentium 3/4 and Athlons are fully compatible with i686. Chances are you don't have to worry about it in that fashion, most servers nowadays are next gen processors.

I would check to make sure that the paths are correct to the metamod files and that you are using the latest version of metamod (1.17), you can check this by typing "meta version" in the server's console while it is running. You can find out what plugins are running on metamod by typing "meta list"

Maybe that will help.

Qwerty

Done it Done everything i reinstalled hlds on it like 18 times every time it crashes whenever i add a plugin (IN WHICH had been previously used before the virus) Is it possible for the operating system to be **** up ?

Vadakill

What distro are you using? Did you try my guides for setting up the server?

Qwerty

Ohwell NM I'll just get windows <!--emo&::gorge::--><img src='http://www.unknownworlds.com/forums/html/emoticons/pudgy.gif' border='0' style='vertical-align:middle' alt='pudgy.gif'><!--endemo-->

Edit: Anyway im using Redhat 9.0 supposingly ( i cant check the OS tho :-\ and the operating system could be mested up for all i know and ive done this sooo many times)