Go Back   EQEmulator Home > EQEmulator Forums > General > General::Server Discussion

General::Server Discussion Discussion about emulator servers.
Do not post support topics here.

Reply
 
Thread Tools Display Modes
  #1  
Old 08-20-2018, 10:11 PM
spidey1170
Sarnak
 
Join Date: May 2009
Location: Alaska
Posts: 61
Default eqemu hardening

I'm familiar with Linux and mysql hardening and I've found a few threads here that deal with that, but, are there any steps to take to harden eqemu, specifically?

I disabled auto account creation after finding a couple dozen accounts created and then looked in my log files and noticed that somebody was probing the server.

Are there any other steps you might recommend?
Reply With Quote
  #2  
Old 08-21-2018, 11:00 AM
Maze_EQ
Demi-God
 
Join Date: Mar 2012
Posts: 1,106
Default

Literally the same steps you'd take to secure your OS/Database.

It's just binaries running that connect to a database....

It's the same as running anything on that system.
__________________
"No, thanks, man. I don't want you fucking up my life, too."

Skype:
Comerian1
Reply With Quote
  #3  
Old 08-23-2018, 01:17 PM
spidey1170
Sarnak
 
Join Date: May 2009
Location: Alaska
Posts: 61
Default

It's odd, but I have several names in the "account" table, after having already deleted many that were on there and yet only 2 names on the "loginserver_server_account" table.

Is this normal behavior?

Last edited by spidey1170; 08-23-2018 at 01:35 PM.. Reason: Changed case on "Account" to "account" to reflect actual table name
Reply With Quote
  #4  
Old 08-23-2018, 01:51 PM
spidey1170
Sarnak
 
Join Date: May 2009
Location: Alaska
Posts: 61
Default

I'm running the server on a Linux box and was thinking about changing the default permissions to:

find . - type d -exec chmod 700 {} \;
find . - type f -exec chmod 600 {} \;

Will that affect anything on the eqemu side? Will it stop the server from running?

EDIT: Okay, I figured out that the eqemu_config.json is the reason that people can create accounts, they can create an account on the loginserver for eqemulator and then see my server and then login to my emulator. I had never tried that before and just did so a few minutes ago, and, sure enough, I saw the account created in the DB.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

   

All times are GMT -4. The time now is 06:35 PM.


 

Everquest is a registered trademark of Daybreak Game Company LLC.
EQEmulator is not associated or affiliated in any way with Daybreak Game Company LLC.
Except where otherwise noted, this site is licensed under a Creative Commons License.
       
Powered by vBulletin®, Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Template by Bluepearl Design and vBulletin Templates - Ver3.3