Jump to content
  • 0

Roles & Features For L2 On Win 08


Question

Posted (edited)

Hi kind peeps, I'm new to this, so the first suggestion I'm inclined to hear is whether its important to pick certain Win Server 08 Roles and/or Features for the optimal functionality of L2Off platform. Basically I'm curious if there are programs that would enhance the Live Server experience in any meaningful way. Thanks in advance

Edited by NeverHide

8 answers to this question

Recommended Posts

  • 0
Posted

I can't speak for VG pack specifically but you should not need to install any additional roles onto the machine.

Just make sure you have all the latest updates and security patches for MSSQL and the OS.

MS seems to only release SQL updates purely as service packs so just grab the latest.

Install all the .Net's manually though, then just grab the updates and security patches though WU.

 

General security advice:

- Disable Windows Firewall and get a real piece of gear to handle protection. Mikrotik is great though there is a bit of a learning curve if you're not familiar with networking.

- Block all inbound ports to the server except Auth and L2Server.

- Allow RDP access but only from specific IP's. Better yet use NAT to change the port to something silly.

- Log all outbound connections from the server.

- Do NOT run the registration system on the machine. Run it somewhere else and filter / proxy the connection.

  • 0
Posted

What pack you want to run?

Yet undecided, leaning towards Vanganth IL ext, I'm currently playing around with his older release. 

  • 0
Posted

Yet undecided, leaning towards Vanganth IL ext, I'm currently playing around with his older release. 

You don't need to install much beside vc++ redist 2005/2008/2010. It works fin on win8 or winserver 2012. Recomanded is win2k8 for more stability.

  • 0
Posted (edited)

Many thanks to both of you folks.

 

@tk422, I'm grateful for your insight regarding network security. Concerning the last peace of advice about registration system, are you only talking about web account manager, or something from the server files as well?

Edited by NeverHide
  • 0
Posted

The best case scenario would be this:

- Write a rest API that runs on the same network as your game server(s) that handles / abstracts the various potentially dangerous tasks.

    ( Account Creation, Activation, Item Delivery, etc)

- Open the port the API runs on to your webserver but set the scope to ONLY talk to your web server's IP.

- The web server should only talk to your rest API. Never to anything sensitive.

 

Player > Web Server > API > Scary L2 Shit :P

 

 

Assuming the API is resilient and secure enough you now have a very minimal attack surface.

I wouldn't go crazy with SSL between the API and the web server. No one can touch the traffic anyway

... unless your web server gets haxxed. :D

 

 

Definitely set up notifications and make sure to keep very comprehensive logs.

  • 0
Posted

The best case scenario would be this:

- Write a rest API that runs on the same network as your game server(s) that handles / abstracts the various potentially dangerous tasks.

    ( Account Creation, Activation, Item Delivery, etc)

- Open the port the API runs on to your webserver but set the scope to ONLY talk to your web server's IP.

- The web server should only talk to your rest API. Never to anything sensitive.

 

Player > Web Server > API > Scary L2 Shit :P

 

 

Assuming the API is resilient and secure enough you now have a very minimal attack surface.

I wouldn't go crazy with SSL between the API and the web server. No one can touch the traffic anyway

... unless your web server gets haxxed. :D

 

 

Definitely set up notifications and make sure to keep very comprehensive logs.

Thats pretty clever, but the problem is, I don't know s**t about REST API  :poker face:  Thanks for your input anyway.

  • 0
Posted (edited)

Thats pretty clever, but the problem is, I don't know s**t about REST API  :poker face:  Thanks for your input anyway.

Just stay with account manager/registration manager out of server . Host in another place. As tk422 say , is pretty risky to host on same pc because can be many injections trough sql or other. Beside that . Never open port 2012 on outside. Is cached admin port.    :)

Edited by xeL

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Posts

    • First, don't really follow the "main voice", moreover if you consider it an hobby. Simply do what you want, you got only one life so use it as you want. If you make it an hobby, it's exactly like piano, or velo - only practice makes you better.   Secondly, how do you learn things ? It's actually a really important question, since some can simply be scholar, read books (theory) then practice ; and some simply can't read books. I'm the second type, I hated school, I find it boring - my knowledge in Java comes from try-and-fail. You improve your coding style every year or so, I can myself rewrite my own code (which I already considered top-notched) after a while. You always learn something new - even if Java barely evolves. L2J is a fun way to learn programming, it's a giant sandbox where you can edit anything, and I believe it should be taken as it.   My own way of learning was as follow : Add existing customs, no matter what they are : the point is to know main classes used by L2J / customs. L2J is barely Java knowledge ; the true knowledge is to know WHAT to search in WHICH location (what I call, organization). You have to understand than EVERYTHING you think already exists, in a form on another, in the source code. A custom is only the association of the different mechanisms you found "here and there", glued together in a proper goal. Once you know main classes to edit, and the customs you added are compiling fine, the main point is to know WHAT exactly you DID. Try to understand WHY and WHERE you actually copied the code. Third point would be to MANIPULATE the customs you added in order to fit your wish. First edit little values, then logic conditions ; eventually add a new Config, or a new functionality to the custom. Fourth point would be to begin to craft your own ideas. Once again, EVERYTHING already exists, in a form or another. You want a cycled event ? You got Seven Signs main task as exemple. Npc ? Search any type of Npc and figure out what it does. Fifth point would be to understand Java - mostly containers (WHAT and WHERE to use them), variables types and main Java mechanisms (inheritance, static modifier, etc). You should also begin to cut your code into maintainable classes or methods. Java can actually run without optimization, but bigger your ideas, more optimized and well-thought it should be. It's direct saved time in the future, and you would thank yourself doing so. Main tips : ALWAYS use any type of versioning system - GIT or SVN. It allows to save your work, step by step and eventually revert back anytime you want if you terribly messed up. L2J is 80% organization knowledge, and 20% Java knowledge. Basically, if you know WHAT and WHERE to search, if you aren't dumb, it's easy to replicate and re-use things. Cherry on top is to use a already good coded pack to avoid copy-paste crap and get bad habits. Avoid any type of russian or brazilian packs, for exemple - their best ability is to leak someone's else code. Obviously you need some default sense of logic, but Java and programming in general help you to improve it.   Finally, most of your questions could be solved joining related Discord (at least for aCis, I can't speak for others) - from the moment your question was correctly asked (and you seemed to search for the answer). My community (and myself) welcomes newbies, but got some issues with noobies.   The simpliest is to try, fail and repeat until you succeed - it sounds stupid, but that's basically how life works.   PS : about Java ressources, before ChatGPT, it was mostly about stackoverflow website, and site like Baeldung's one. With ChatGPT and alike, you generally double-cross AI output to avoid fucked up answers. Also, care about AI, they are often hallucinating really hard, even today. They can give you complete wrong answer, you tell them they are wrong, and they say "indeed, I suck, sorry - here's a new fucked up answer". You shouldn't 100% rely over AI answer, even if that can give sometimes legit answers, full code or just skeletons of ideas.   PPS : I don't think there are reliable ressources regarding L2J itself, also most of the proposed code decays pretty fast if the source code is actually maintained (at least for aCis). Still, old coded customs for old aCis sources are actually a good beginner challenge to apply on latest source.
    • Add prices please.
    • WTS: - AQ - Baium - Zaken  - Frintezza - Vesper Fighter Focus Fire Element   pm for detalis
    • We have the best price! L2Reborn.org Signature x1 Franz NEW!! 1KK = $20 HURRY TO BUY AT THE TOP PRICE discord - adver745645
  • Topics

×
×
  • Create New...

AdBlock Extension Detected!

Our website is made possible by displaying online advertisements to our members.

Please disable AdBlock browser extension first, to be able to use our community.

I've Disabled AdBlock