infrastructure-roadmap icon indicating copy to clipboard operation
infrastructure-roadmap copied to clipboard

GAME Firewall Gen3 - fix HL2 Source profile for Counter-Strike 1.6

Open krysteksulek opened this issue 9 months ago • 1 comments

Issue 1: HL2 Source profile on GAME Gen3 is fully based on challenge packets in A2S_INFO requests regardless of traffic on the gameserver. This breaks backwards compatibility with older game clients known as NonSteam (still used by above 50% of the community). Current logic of this profile is useless for games like Counter-Strike 1.6 and needs to be changed or reverted silmilar to Gen2 profiles.

Issue 2: HLTV demo recorder can't connect while FW Game is enabled and this issue is also well known on older Gen1/Gen2 servers. Current workaround for this is to enable FW Game after HLTV has connected to gameserver so we skip getchallenge packet filtering and get temporarily whitelisted for next connections. I guess that this profile have very strict packet length/payload checks, which is a bit different for HLTV recorder and looks like this:

Image

krysteksulek avatar Feb 06 '25 18:02 krysteksulek