pyBEscanner

That's an error with a filter...
Assuming u aren't using a custom filters..
It should be already fix in latest commit on github..
 
As above, only started when I used the new createvehicle filter, perhaps I will modify it and try again.
 
And it is fixed...
Typo was in loading rules from spam filters

Plz don't submit, filters that aren't tested.
Like i said before, have closed my dayz servers...

Otherwise i just have to leave this app alone, for someone else to maintain thx
 
Hi Torndeco,
i am wondering if the "Scan Setpos = standard" is doing what i think it should.
Like recognizing teleporting players?
or what is it for?
i want players who are teleporting to be kick/banned automatically.

Thanks for your help!
 
I have a problem with last update from github.
I've been banned while I was placing PipeBomb. This is what i got :
xxxxxxxxxxxe5ff640aaaaa4b749f -1 11.01.2013 05:06:37: DayZNetwork.fr MaD on Utes - createvehicle

And inside the createvehicle-spam.txt i have:

11.01.2013 05:06:14: DayZNetwork.fr MaD 92.138.108.121:2305 xxxxxxxxxxxe5ff640aaaaa4b749f - #44 "G_40mm_HE" 20:69 20:4 Soldier1_DZ [3717,3621,20] [-79,-3,-8]
11.01.2013 05:06:31: DayZNetwork.fr MaD 92.138.108.121:2305 xxxxxxxxxxxe5ff640aaaaa4b749f - #44 "G_40mm_HE" 20:84 20:4 Soldier1_DZ [3749,3657,20] [-55,-57,0]
11.01.2013 05:06:37: DayZNetwork.fr MaD 92.138.108.121:2305 xxxxxxxxxxxe5ff640aaaaa4b749f - #44 "G_40mm_HE" 20:85 20:4 Soldier1_DZ [3747,3668,21] [-47,-64,4]

Other people have been banned for the same reason, any idea what's going on here ?
 
Sorry for bringing bad news, but since I updated with your last commit (0e6051610bbbd7632e152079b52e95d88c140ea0), a lot of people are getting banned :S
Here is what i have in the createvehicle-spam.txt :

a lot of :
Code:
Player Name = Zombie Heath Ledger
    Action = BAN
        11.01.2013 18:07:58: Zombie Heath Ledger 50.135.165.200:2305 000000000006c59b4e994cb5a88b116 - #0 "PipeBomb" 153:52 153:43 Survivor2_DZ [2236,4013,6] [0,0,0]
        11.01.2013 18:08:08: Zombie Heath Ledger 50.135.165.200:2305 000000000006c59b4e994cb5a88b116 - #0 "PipeBomb" 153:54 153:43 Survivor2_DZ [2238,4014,7] [0,0,0]
        11.01.2013 18:08:14: Zombie Heath Ledger 50.135.165.200:2305 000000000006c59b4e994cb5a88b116 - #0 "PipeBomb" 153:55 153:43 Survivor2_DZ [2238,4014,7] [0,0,0]

and a lot of :
Code:
Player Name = aten tappaja
Action = BAN
11.01.2013 18:15:22: aten tappaja 91.157.154.225:2305 000000097981b52ef2a0e33e67aca1c - #0 "PipeBomb" 173:85 173:57 Soldier1_DZ [3235,4613,4] [0,0,0]
11.01.2013 18:15:51: aten tappaja 91.157.154.225:2305 000000097981b52ef2a0e33e67aca1c - #0 "PipeBomb" 173:90 173:57 Soldier1_DZ [3247,4588,4] [0,0,0]
11.01.2013 18:16:12: aten tappaja 91.157.154.225:2305 000000097981b52ef2a0e33e67aca1c - #0 "HelicopterExploSmall" 173:95 0:0 [3232,4613,1] [0,0,0]

:S
 
Anyway i removed it from the github....

Very simple its a regex rule, someone else figure it out...
Someone else can figure it out as i have mentioned i no longer have any dayz servers to test this out on...

U can always use the following when testing out a spam rule...
That way it only logs & doesnt ban i.e

3 59 LOG (?!((#0 "HelicopterExplo)|(#0 "SmallSecondary))).*\[0,0,0\]$
 
Ho ok, I'm not very used to the regex thing :s would you mind to explain for example what this line do ?
Code:
3 59 LOG (?!((#0 "HelicopterExplo)|(#0 "SmallSecondary))).*\[0,0,0\]$
And what words mean like 3 or 59, etc.. ?
 
Do a google search igoooor, it took me awhile to get used to it, but once you do its powerful. Google will explain it much better than I or someone else will.

As for the spamlist entry it means 3 occurances within 59 seconds, then take action (in this case LOG). The expression after log is what it is checking the occurances for. In this case its anything that contains [0,0,0] which is usually a sign of hacking (with the exception of heli crashing - Helicopter explo & smallsecondary). There is another exception being the pipebomb (satchel charge in game). This is spawned at 0,0,0 for reasons unbeknown to me and I am still yet to get any answers from any of the developers.

Most scanners check for these 0,0,0 spawns with the exception of pipebombs as legit one's spawn at 0,0,0 too. Hackers know this and can easily get away with spawning them in, that's what this rule is designed for to stop hackers spawning in pipe bombs. Unfortunatley at the moment is picking up false positives, but hope to get the rule working asap :)
 
Awesome ! I could not expect more for an explanation !
Thank you very much, I will look for some regex examples now ^^
 
You say the PipeBomb spawn at 0,0,0 but I don't see the exception in that rule. Shouldn't we add it ? Something like that :
3 59 BAN (?!((#0 "HelicopterExplo)|(#0 "SmallSecondary)|(#0 "PipeBomb"))).*\[0,0,0\]$
?
 
No that's the exact thing we are looking for. Pipebombs are rare and there should be no reason why 3 are let off in a minute. That's why we are banning for spam of (3 in a minute) anything at [0,0,0] with the exception of Heli crash related items. Torndeco has removed it from the spamfilters from now until we can get a reliable working solution
 
with the latest version, is everything good to go as long as its doing
"Scanning.........." ?

Had some initial problems and dont want to break anything--with the previous version I could tell it was properly reloading and scanning the filters.
 
No that's the exact thing we are looking for. Pipebombs are rare and there should be no reason why 3 are let off in a minute. That's why we are banning for spam of (3 in a minute) anything at [0,0,0] with the exception of Heli crash related items. Torndeco has removed it from the spamfilters from now until we can get a reliable working solution

Ok ! I get it !
So for exemple, if I have 2 servers, one where it's hard to find PipeBomb, and one where it's easy to find some, I should use the dayz-default for the one where it's hard to find PipeBomb with this rule :
Code:
3 59 LOG (?!((#0 "HelicopterExplo)|(#0 "SmallSecondary))).*\[0,0,0\]$
And for the one where it's easy to find PipeBomb, create a new folder for example /dayz-utes where I create a file createvehicle.spamlist and I put this line instead :
Code:
3 59 BAN (?!((#0 "HelicopterExplo)|(#0 "SmallSecondary)|(#0 "PipeBomb"))).*\[0,0,0\]$
and use dayz-utes instead of dayz-default.
That's right ?
 
@dayz10000 - Yes it's less informative now, but that's a good thing. Depending on how you run it, you can send the output and errors from the console window to a log file for when it crashes, but usually "Scanning.........." is a sign of normal activity :)

@igoooor - That's exactly what you want to do but you'll need to include all the other filters in the dayz-default directory too, because if you stop using dayz-default you'll lose all the filters in that folder
 
Back
Top