Quote:
|
Originally Posted by Shawn319
And to madborg: Everytime someone tries to connect to you even if server is locked, down, or your connecting locally but still using the loginserver you will probably get a message saying soandso is trying to connect and a few opcodes. even though you may think theres no connection from your computer to another.
|
Easy way to avoid any name/password stealing is to Never use real ones. But unfortunately not everyone will follow that rule and altough eqemu itself is not a security problem, I believe there is some security concerns with the way the login server is set up.
Tyco aside -- I have verified that no such user ever existed on my system-- there are some holes that concerns me. The fact that the login server can read/write to my database leaves me completely open. The fact that the login server can get to my database and my world server, means that I have a big hole in my network. So now I have to find the hole and shut it down.
that means that my posting about how to set up 0.2.0 is wrong for the people with private IPs.