[crossfire] metaserver differences and code

Preston Crow pc-crossfire06 at crowcastle.net
Fri Apr 14 15:15:37 CDT 2023


Ahh, I'm running on my home fibre connection.  That explains why the 
metaserver might not like me.

On 4/14/23 16:00, Rick Tanner wrote:
>
> Another note...
>
> https://sourceforge.net/p/crossfire/metaserver/ci/master/tree/meta_update.php#l40 
>
>
> Which is:
>
> // Basically, either forward or reverse addressing must work -
> // if the ip that the user specified hostname resolves to does
> // not match that of the incoming connection, or the hostname based
> // on the ip of the incoming connection does not match that specified
> // by the server, we reject this user - no spoofing of other servers
> // allowed.
> if ($ip != $_SERVER['REMOTE_ADDR'] && $hostname != $_POST['hostname']) {
>     echo "neither forward nor reverse DNS look corresponds to incoming 
> ip address.\n";
>     echo "incoming ip: " . $_SERVER['REMOTE_ADDR'] . ", DNS of that: 
> $hostname\n";
>     echo "User specified hostname: " . $_POST['hostname'] . " IP of 
> that hostname: $ip\n";
>     log_message(LOG_WARN, $_SERVER['REMOTE_ADDR'] . " does not have 
> correct hostname set\n");
>     exit;
> }
>
>
> And find this:
>
> $ dig crossfire.crowcastle.com
> crowcastle.com.
> 173.48.158.241
>
> $ dig -x 173.48.158.241
> pool-173-48-158-241.bstnma.fios.verizon.net.
> _______________________________________________
> crossfire mailing list
> crossfire at metalforge.org
> http://mailman.metalforge.org/mailman/listinfo/crossfire
> IRC: http://crossfire.real-time.com/irc/index.html
> Discord: http://crossfire.real-time.com/discord/index.html
> Project Site: https://sourceforge.net/projects/crossfire/
> Wiki: http://wiki.cross-fire.org/
> Website: http://crossfire.real-time.com
>


More information about the crossfire mailing list