Luigi Auriemma

some days ago an admin has been reported the exploiting of a particular problem on a Jedi Academy server so I have made some quick tests and I have found that it's just an effect of q3fill with the option -t 0.

I premise that only JA is affected and both the classic server and the japlus one (I name it because, as far as I have understood, it's a very used mod) have the problem although with 2 different effects:
- freeze in the first one
- crash in japlus

the -t 0 option of q3fill forces the proof-of-concept of trying to join the server immediately if it's full or no other players are accepted from the same IP address.
so the effect is that the server will start to show a lot of Client XXX connecting with 50 challenge ping where XXX is the number of the slot occupied which in some cases could be ever the same or being incremental.

anyway after a lot of these messages (less than 2 minutes of "attack") the server starts to have the problems described before.

due to the type of problem at the moment the only way to limit it is though the playerslimiter or playerslimitermax project which just filters completely the connect packet:

http://aluigi.org/patches.htm#playerslimiter

Don't work on new japlus versions >.< cause of the ip limit :<

oh I forgot to say that it works moreover with the 2 players limit, that's where the "-t 0" option of q3fill makes the difference.
and, obviously, all my tests have been performed on the latest versions with the default configurations.
try it :)

yeah, i've tried it too, just works on non-fixed pure server, maybe japlus 2.3, not on fixed base, or japlus 2.4 beta 3 or more. pity..

I performed my test with japlus 2.4 Beta 4 (default configuration)

maybe it has something to do with dmflags
:dmFlags:.
used to set misc settings
DF_NO_FALLING_Damage DF_FIXED cg_fov
DF_NO_FOOTSTEPS DF_NO_DROWN Damage
DF_FIXED Cl_YAWSPEED DF_NO_FIXED_ANIMS
DF_NO_REALISTIC_HOOK
user can choose which dmflag he needs for server.cfg

Shadow and me tried to flood at same time, on x.x.x.x:29070 DeutscherImperialServer (Safest server atm i think)

nothing happend . . .

please don't post IP addresses of machines which are not yours.
then all the tests must be performed ever on the own machines otherwise it's impossible to judge a result

okay, sry. I tested it now on my own server (Japlus vers. 2.3 beta 3)
just 2 bots could connect, the console is showing "Player .."XYIOASD... "To many Players with same IP"". and this like over a million times, but nothing happend. Server dont lag or crash. And my server has just Japlus on the japlus folder. so i don't now what i do wrong.
my cmd is like that:

D:\Users\bla\Hacks\q3fill.exe -t 0 x.x.x.x:25000

some ideas'?

the command-line is correct so I guess that the negative effect happens only in some conditions, when after tons of these connections (about one minute locally) arrives the error:
anyway it's not important, I wanted only to show this possible problem in case someone sees something strange or wanted make the test on different conditions

fixed in japlus 2.4beta5