[SOLVED] World server packet spoof protection

[katos]

Hey guys,

Got an issue here, on character creation, if the user hits "back" instead of "accept" then the account is banned on the grounds of packet spoofing - does anyone happen to know why? This has happened to everyone that has hit "back" now so is not one-off.

My configs for packet spoofing:

# PACKET SPOOF PROTECTION SETTINGS
#
# These settings determine which action to take when harmful packet spoofing is detected.
#
#    PacketSpoof.Policy
#        Description: Determines the course of action when packet spoofing is detected.
#        Default:     1 - (Log + kick)
#                     0 - (Log only 'network')
#                     2 - (Log + kick + ban)

PacketSpoof.Policy = 2

#
#    PacketSpoof.BanMode
#        Description: If PacketSpoof.Policy equals 2, this will determine the ban mode.
#        Note:        Banning by character not supported for logical reasons.
#        Default:     0 - Ban Account
#                     2 - Ban IP
#

PacketSpoof.BanMode = 2

#
#    PacketSpoof.BanDuration
#        Description: Duration of the ban in seconds. Only valid if PacketSpoof.Policy is set to 2.
#                     Set to 0 for permanent ban.
#        Default:     86400 seconds (1 day)
#

PacketSpoof.BanDuration = 86400

If anyone needs anymore details please let me know.

Thank you so much for any help guys.
Regards,
Katos

 

[Rochet2]

TC version?

 

[katos]

TC version?

Can't believe I forgot that, my apologies. Unsure as to exactly which rev it is to be totally honest, and the files just state : TrinityCore rev. unknown 1970-01-01 00:00:00 +0000 (Archived branch)

Really sorry I can't be of much help here, can you remind me how to check the rev I am on sorry, and I shall get back to you.

Many thanks for the swift reply.

 

[Rochet2]

Hmm, seems the packet spoof is written only for one packet and its been there for a while
It kicks or bans you if you send the one packet twice.

For now just set it to kick the player.
Should make an issue on TC issue tracker.
They can then decide where they want to place the allow function to fix this.

Seems there is one already:
https://github.com/TrinityCore/TrinityCore/issues/10915

 

[katos]

Hmm, seems the packet spoof is written only for one packet and its been there for a while
It kicks or bans you if you send the one packet twice.

For now just set it to kick the player.
Should make an issue on TC issue tracker.
They can then decide where they want to place the allow function to fix this.

Seems there is one already:
https://github.com/TrinityCore/TrinityCore/issues/10915

Many thanks for your support, I will have to set this to kick for now. I suppose it wont be an easy one to fix then, since the system kicks on 2 packets, rather than counting the packets received etc.