Silenci0 / SMAC

Sourcemod Anti-Cheat
Other
152 stars 53 forks source link

L4D2 command blocker #6

Closed lunatixxx closed 5 years ago

lunatixxx commented 5 years ago

Commands block plugins is broken of Left 4 Dead 2, don't know about other games. I remember seeing on l4dblog a long time ago than developpers updated the game to avoid "malicious" servers blocking client commands, i guess this is what broke the plugin. You can add new commands to block but it will not do anything from what i know.

For example when my character is down i can still open or close a door with a console command who is supposed to be banned "choose_closedoor" and "choose_opendoor". I guess many other cheat commands could be abused, i did not test them all.

Silenci0 commented 5 years ago

Thank you for the report. There are several commands it should block, but perhaps L4D2 is different in that regard. Another good alternative might be this plugin here: https://forums.alliedmods.net/showthread.php?t=73828

Its an older plugin, but its simplistic and generally works. The difference between the two is the approach in blocking commands, but generally, what the command blocker can't or won't block, this one generally does. That said, I don't know if this works in L4D2, so you'll probably need to give it a shot.

lunatixxx commented 5 years ago

Oh wait, i added "choose_closedoor" by myself in smac.cfg but this time with the ban activated and it works too. But it will still be nice if the block function were working.

edit : You can't do that because otherwise people get banned for no reason. I think Valve just need to fix this command.

lunatixxx commented 5 years ago

By the way sorry to annoy you but does there is a way to verify than clients respect the value sv_pure from server, or to verify they do not bypass the check of CRC files. I searched informations on that on google, some cheaters are able to do that it seems. Adding sv_pure to the cvar list doesn't work, it is not a cvar i think.

Silenci0 commented 5 years ago

I would not know since this is the first I've heard about this kind of bypass. I think that would require some research on how it is being done in order to determine if its possible to prevent or not.

lunatixxx commented 5 years ago

Banning choose_closedoor and his brother is not possible by the way, or it ban people when they interact with doors normally. Valve has to fix it probably.

Silenci0 commented 5 years ago

Sorry for the late reply on this, but I looked into this further and the SMAC plugin already has these listed as commands it is meant to ignore in the code file itself, so it should ignore these command already, but since they are not being ignored, it might be another issue with these commands that valve needs to fix (the commands could be client-side which is why people can still use them). I have looked up these commands and the searches turn up results similar to what you are asking for with people responding with the same responses.

At this point, the only options available to potentially remedy this are as follows:

Ultimately, I think you are right, this is a command that Valve will need to take care of, but considering how long it has been since it was a concern, it might need to be brought up to them again with more concrete examples on how to reproduce the issues seen when using these commands.

Thank you for the report, if you run into anymore issues, feel free to open a new issue. Closing issue.