Laurie the Deepminded's picture

Zora's Nephthys for Rune

Nephthys server security

Nephthys is a native security modification for Rune, which makes
your server invulnerable against most types of attacks and also adds
many features. Nephthys is known for Unreal since years and for Deus Ex
since about one year. Now it's available for Rune 107 and Rune 108HoV. (since V1.5a006: Rune 101)


Nephthys also blocks the Memory and CPU overloading attack.


Due to missing public headers and libraries for Linux and Mac, Nephthys currently is available for Windows boxes only.

(Update, since Jan 17, 2009 Zora created a Linux version of Nephthys. Runs on Rune (Linux-i386) Download here)



Features:

  • Integration
    • Nephthys may be combined with any game type and any other server mod running simultaneously
    • Pure server-side mod: the client does NOT need to download anything nor does even know that there's a security mod running
    • Nephthys may be installed independently at clients to profit by supported web download redirections
    • Remote admin control through admin commands
    • Native support of win32 Unreal 224v, Unreal 225f, Unreal 226b (gold),
      Unreal 226f, Deus Ex 1100 (1112fm), Rune 107, Rune 108 (108HoV)
  • Attack blocking
    • Limit number of players with same IP address
    • RJA (repetitive join attempt) attacks
    • DRJA (distributed repetitive join attempt) attacks
    • RIA (repetitive injection attempt) attacks
    • IIA (illegal injection attempt) attacks
    • RUF (repetitive unwanted function) attacks
    • RBO (RPC bunch overflowed) plethora
  • Bug fixes / work arounds
    • Memory and CPU overloading attack ==> drop connection
    • Zombie (reconnect) bug attack ==> drop connection
    • Unreal engine format string bug attack ==> drop connection
    • Detect broken connections (ICMP port unreachable) ==> drop connection
    • Auto-closing multiple connections to same player to avoid server lag with reconnecting fast client computers
  • Banning
    • Banning blocks a connection before opening, so banned clients can't
      even download stuff from server and thus causing lag nor can do other
      harmful things

    • Bans may block the client's server query as well so the server becomes invisible to the banned client (stealth mode)
    • Banning by IP address (range)
    • Banning by Name
    • Timed bans
    • Quiet bans
    • Name reservation bans
    • Alert new ban entries
    • Alert applied bans
    • Alert disabled bans
    • Disable ban while admin online
    • Log any applied ban
  • Kicking
    • Drop connection immediately
    • Support kick of uploading / not yet established connections
  • IP log
    • Automatic logging of IPs and names (IP address ranges supported too)
    • Log by IP address (range)
    • Limit log to a fixed number of entries
    • Count various events
    • Admin command to ask for names of a known connection / IP address
  • File Upload
    • Alert uploads
    • Limit uploads to a configurable max. size per connection, reconfigurable during game-play
    • Limit uploads to a configurable max. size of package
    • Limit upload bandwidth to available bandwidth, possibly throttled down
    • Admin command to ask for details of progress
  • Web Download
    • Automatic download and extraction of needed files
    • Full compatibility between old and new servers and clients
    • Downloaded files are checked with Sha-2 (256) to be the same files currently running at the server
    • Servers provide lists of archives at web spaces where clients may download packages from
    • Clients use provided web download locations for fast, compressed downloads
    • Supports HTTP and FTP (active and passive)
  • Server Query
    • Additional server rules to display at advanced game clients (GameSpy, QTracker)
    • Player rules may report bots, spectators and cameras additional to real players
    • Attack blocking
  • Master Server Uplink
    • Attack blocking
    • Support custom-made master servers
  • UScript Interface

    You may write an extension mod for Nephthys using it's uscript API (see detailed documentation below)

(Complete Manual).


Installation is fully automated and requires only a couple of seconds. A
manual installation to a (rented) server with upload only is possible
after a local installation (see detailed instructions in the complete
manual).


Nephthys was, is and will be free to download and use. It comes without any adware and without any spyware.


Here's the new Nephthys_v1.5a018 alpha version.

Unfortunately this forum doesn't support larger attachments, so you need to download it from my site directly:



http://zzora.altervista.org/Nephthys.html (Please be sure to download at least Version 1.4aNNN).



Note that this is an alpha version. It's fully functional and stable but
minor options may change in the future. Please give me all your
feedback to support this mod!


Go on and get fun!


Zora

HOME