eqemu hardening

spidey1170 · #1 08-20-2018, 10:11 PM

I'm familiar with Linux and mysql hardening and I've found a few threads here that deal with that, but, are there any steps to take to harden eqemu, specifically?

I disabled auto account creation after finding a couple dozen accounts created and then looked in my log files and noticed that somebody was probing the server.

Are there any other steps you might recommend?

Maze_EQ · #2 08-21-2018, 11:00 AM

Literally the same steps you'd take to secure your OS/Database.

It's just binaries running that connect to a database....

It's the same as running anything on that system.

spidey1170 · #3 08-23-2018, 01:17 PM

It's odd, but I have several names in the "account" table, after having already deleted many that were on there and yet only 2 names on the "loginserver_server_account" table.

Is this normal behavior?

spidey1170 · #4 08-23-2018, 01:51 PM

I'm running the server on a Linux box and was thinking about changing the default permissions to:

find . - type d -exec chmod 700 {} \;
find . - type f -exec chmod 600 {} \;

Will that affect anything on the eqemu side? Will it stop the server from running?

EDIT: Okay, I figured out that the eqemu_config.json is the reason that people can create accounts, they can create an account on the loginserver for eqemulator and then see my server and then login to my emulator. I had never tried that before and just did so a few minutes ago, and, sure enough, I saw the account created in the DB.