How to prevent downloading illegal files

-W0kk3L- · Post by **-W0kk3L-** » Mon Jul 31, 2006 8:17 am

How do i prevent downloads like this?:

clientDownload: 0 : beginning "../.ssh/id_dsa.pub"
Redirecting client '123' to http://url/../.ssh/id_dsa.pub
clientDownload: 0 : beginning "../.ssh/id_dsa.pub"
Client '123': falling back to regular downloading for failed file ../.ssh/id_dsa.pub
'123' downloading at rate 25000
clientDownload: 0 : file "../.ssh/id_dsa.pub" completed

This file is pretty harmless, but they also downloaded other files in etmain and etpro, which shouldn't be downloaded (e.g. files with the rcon password in it etc).

Anyone?

WeblionX · Post by **WeblionX** » Mon Jul 31, 2006 8:43 am

I believe that was fixed in 2.60b. Also, you can always chroot ET so even if another exploit occurs they won't be able to get out of the et directory.

-W0kk3L- · Post by **-W0kk3L-** » Mon Jul 31, 2006 8:45 am

Well, there are no harmless files outside of the ET directory. But they are also downloading the files which contains the rconpassword. Which is located in the etmain. How do i prevent them from downloading that one?

Spoofeh · Post by **Spoofeh** » Mon Jul 31, 2006 8:55 am

It does sound like this bug, so the solution should be to upgrade to 2.60b like WeblionX said.

-W0kk3L- · Post by **-W0kk3L-** » Mon Jul 31, 2006 9:54 am

most likely. Updated our servers.