SV_DownloadURL Protection......

[Masher]

I've just started a new, free service that will help you protect your sv_downloadurl settings. Why? Other admins can easily find out what your sv_downloadurl server is and use it for their own game servers with out your permissions or even knowledge. It does happen, it's happened more than once to me.

It's pretty simple. After signing up and entering the information for your fast download server, and entering the ip addresses of the game servers allowed to use it; we'll give you a unique URL to use for all of your game servers' sv_downloadurl setting.

When a client connects to your game server, we'll check to see if that player is accessing a gameserver allowed to use the fast download server and redirect them to the approriate place. If the server isn't allowed, they'll get a nice 404 error message and won't be redirected.

Again it's free, and we plan on adding some new neat features to it in the future as well. If you have any questions or problems; please let me know.

http://protect.brainless.us

[Drocona]

Oh that's very nice!

[dualcore1289]

very very nice. goodjob masher. masher comes up with some good stuff. . . where would we be without him lol

[BrutalGoerge]

ive been fumbling around with that damn .httaccess thing and failing for a long time trying to make our servers protected. I think i might try 'er out.

[dualcore1289]

i use the .htaccess for my fastdownloads. . works nicely.

[helio]

How do you have your .htaccess file setup?

[dualcore1289]

SetEnvIfNoCase Referer hl2://00\.000\.00\.00 allow_download
Order Deny,Allow
Allow from env=allow_download
Deny from all

replace the zeros with your server ip

[sishgupta]

@Dual
Nice, thanks =)
Can you show me how to do it for more than one ip?

[css]

sishgupta Wrote:@Dual
Nice, thanks =)
Can you show me how to do it for more than one ip?

You just add more lines like:
SetEnvIfNoCase Referer hl2://00\.000\.00\.00 allow_download
SetEnvIfNoCase Referer hl2://10\.100\.00\.00 allow_download
SetEnvIfNoCase Referer hl2://20\.200\.30\.00 allow_download

This sets the "allow_download" environment variable IF the referer matches to the "hl2://....." string. Then the following lines reject the query unless the "allow_download" environment variable is set.

This is great tut. Masher's got nice solution, but this .htaccess method is much better.

[sishgupta]

css Wrote:

sishgupta Wrote:@Dual
Nice, thanks =)
Can you show me how to do it for more than one ip?

You just add more lines like:
SetEnvIfNoCase Referer hl2://00\.000\.00\.00 allow_download
SetEnvIfNoCase Referer hl2://10\.100\.00\.00 allow_download
SetEnvIfNoCase Referer hl2://20\.200\.30\.00 allow_download

This sets the "allow_download" environment variable IF the referer matches to the "hl2://....." string. Then the following lines reject the query unless the "allow_download" environment variable is set.

This is great tut. Masher's got nice solution, but this .htaccess method is much better.

Perfect. Thanks!
Also thanks for the explanation, very helpful.

[Svuppe]

An additional note I learned the hard way: For this .htaccess method to work (at least on Apache servers), the following is required for the directory in question:

AllowOverride FileInfo Limit

Just in case this isn't the default setting already (it wasn't on mine).

[Mosalar]

Is there anything else that needs to be in the htaccess? I created an access file with the exact syntax as dualcores post(adding my servers ip). I then tried to browse to a file in that dir(through a webbrowser) and was rejected, yay I thought. Then I created a dedi server here on my pc, added the same download url as my gameserver, deleted the map and tried to join. To my dismay it started downloading the map from the sv_downloadurl source even though my ip is not in the access file. Did something change? Or did i miss a step somewhere?

[dualcore1289]

you may not have it in the right directory? Because i use this, and it works perfect, restricts others, and you cant view it. . .

[Mosalar]

I found out what happened... I have mirrored sv_download sources and the one with the access files was not the one that the server was using for it's sv source. It does work as specified. And I apologize to Masher for cluttering up his thread.