[Server]Teamspeak accounting ip is hard-coded

ehthe

Retired Staff
Contributor
Apr 26, 2015
1,028
896
216
Just a word of caution :) . Don't just redirect the domain name to localhost ! You should also blackhole the ip.
dig of the domain :
Code:
accounting.teamspeak.com -> 128.65.210.118
hardcoded string :
Code:
ddlocpimbkicgmpoggncecmgldde -> 128.65.210.118
 

Supervisor

Administrator
Apr 27, 2015
1,863
2,546
335
Can you give a further explanation please? I have my firewall enabled on the ports anyway, but why isn't it enough to redirect?
 

ehthe

Retired Staff
Contributor
Apr 26, 2015
1,028
896
216
If you just redirect the domain name, the server won't be able to resolve the ip behind the domain name. But, as you can see the ip of the domain name is hard-coded, so in theory the server could access it anyway.
 

Asphyxia

Owner
Administrator
Apr 25, 2015
1,844
2
2,197
327
What ehthe is saying is that:
The TeamSpeak server is not only trying to connect to accounting.teamspeak.com, but it could also make an attempt to directly connect to the TeamSpeak 3 accounting server via IP address, which is 128.65.210.118. I think that this would only happen if the domain were to not resolve, perhaps this was put in place in case of DNS issues, but as long as accounting.teamspeak.com resolves, it should NOT try connecting to 128.65.210.118. It is still a good idea to blacklist the IP address 128.65.210.118 or modify the server binary to break that IP address (if possible). :)
 

p0tassium

Member
Jun 13, 2015
68
48
53
hmm
506355.png
 

Asphyxia

Owner
Administrator
Apr 25, 2015
1,844
2
2,197
327
I think they refuse connections which aren't encoded and sent on the right port(s).
 
Top