Hacker problem

[michelle]

A player on my server was threatenig to get his mate to hack my server and since then for the last 3 days by a making lots new accounts.
the hacker has been able to lvl his characters up to 255 and can make items niether of which show's in the logs, the items do show in logs once he drops or trades them and are fully traceable from then on.
and he's been dropping lots of gold and item in sz for people to get which is causing havoch with the server, the worst was yesterday evening when I was on he was makin account nearly as quick as I was detetin them
dont think its testga hack as got deadsons M2
at mo am trying to get info about stoping new account creation
but untill I do I dont know what else I can do to stop it

any help would be appretiated

have attatched screan shots of hackers threats with another gm

 

[Babyhack]

disable make new account in setup then reboot
am not 100% how what to edit in the setup (am in office now)
but i am sure someone will post it

edit
found it set this to FALSE

TestServer=TRUE

should stop new accounts being made

edit 2
also make sure port 6000 cannot be accessed from outside the server

LMAO edit 3
had to edit post to say port

BH

 

[michelle]

Thank you Babyhack
am off to have look into it now

Ta
Michelle

 

[Detritus]

post = port

 

[Babyhack]

post a reply if it works so that if anyone else has the same prob they can use this post

BH

 

[Nightwolf]

ye i had same problem had to do wip all fixed now

 

[Babyhack]

sorry i posted wrong
there is this in the logsrv.ini which needs to be added to FALSE

EnableMakingID=TRUE

sorry about that had no files infront of me to be sure and know you needed a quick reply to stop what was going on in your server

BH

 

[rowey]

Hey i also help run LOCMS with athena. we tried these fixes. but none of them seem to work. EnableMakingID was already set to false. and the other config edit not only disabled accounts but it disabled GM, no leveling over 50 etc.

 

[urbanfox]

How could anyone run a server without a firewall fully locked down.

 

[BloodDemon]

its a exploit, block port 6000 and wala simple really. This prevents the exploit from working

 

[michaelj:mrj]

bh's method works, do that.

 

[michelle]

sorry i posted wrong
there is this in the logsrv.ini which needs to be added to FALSE

EnableMakingID=TRUE

sorry about that had no files infront of me to be sure and know you needed a quick reply to stop what was going on in your server

BH

thanks Babyhach This works ok in stopping account making
Ta
Michelle

 

[Babyhack]

NP am here to help (I think)

BH

 

[michelle]

its a exploit, block port 6000 and wala simple really. This prevents the exploit from working
BH

Have got Zone Alarm Proffessional which allows web address and IP blocking but can't see anywere in it to port block ?

 

[Forsaken]

Have got Zone Alarm Proffessional which allows web address and IP blocking but can't see anywere in it to port block ?

Zone alarms blocks all ports, unless you open the ports.