Question - Quick question in trying to circumvent "True Box" servers

[jizzy]

I have a question in regards to using a VBox and having a VPN running to change the IP on the virtual box.

Can DBG still detect that I'm using the VBox even though the IPs are different?

 

[Jmo]

Yes. It searches for MAC Address from what I've been told, not IP.

 

[TreeHuginDruid]

removing my original post.... some nonsense about mac address spoofing or something......

 

[playj]

THD, why nonsense?

Even nonsense can be a fascinating question.


Let's see if I am thinking right and remember my Network Layers 2 and 3 right.

Mac Address: Layer 2, Data Link Layer
IP Address: Layer 3, Internet Layer
UDP Packets: Layer 4, Transport Layer

Single Computer, Single Network Card . Note: (Mac Address can be changed at will but takes a few seconds of interruption at least using TMAC, plus it not relevant as you can only have one Mac address at a time on a single interface)

Multiple VBOX Guest instances running Windows(each with its own virtualized network card with its own MAC address).

Each VBOX instance is connecting to a different VPN (providing different IP address).

How would EQ servers know that each connection passes through a single network card somewhere down the line?

I mean eqgame.exe would be able to see the virtual guest MAC provided by VBOX virtual network adapter but how would they see the REAL(spoofed or not) Mac address of your network adapter?

I am not sure that they would be able to see all the encapsulated info.

MAC address information gets stripped each time you get routed through a new Layer 2 network and I am pretty sure none of us are connecting on Daybreaks internal Layer 2 network. :0

Don't they get UDP packets from us(client)?

Kind of hard to answer without inspecting packets.

I know that using VBOX(even without VPNs and thus no IP change) you could fool Dropbox into thinking you were on multiple computers and get referral space this way. Not that I advocate doing this

 

[rzek]

Their check is done based on MAC address, so yes, running EQ within it's own VM with a spoofed MAC address would bypass it. Setting up a bridged connection inside the VM to connect to a VPN would add an extra layer of security in case they for some reason get a player report about you or a GM sees you, but it's not a requirement. I'd wager that the origin MAC address is contained in the actual game data packet, not the frame that is carrying it, as the MAC address in the frame itself changes across every router it goes through. That's if I'm remembering my schooling correctly anyway. :P

 

[E9er]

According to one head coders i get info from they can now track everything p99 can. When daybreak advertised p99 server it was for a reason. People think and believe it was to delay prog server launch to not hurt p99 or eq. But what they actually did was advertise for hardware. Daybreak since the true no box server can now track every single thing that p99 can and could. Not to mention they have updated tracking abilities to a single computer vrs ip. No vpn will hide what they can track sadly as their programs even detect vpns.

 

[rzek]

According to one head coders i get info from they can now track everything p99 can. When daybreak advertised p99 server it was for a reason. People think and believe it was to delay prog server launch to not hurt p99 or eq. But what they actually did was advertise for hardware. Daybreak since the true no box server can now track every single thing that p99 can and could. Not to mention they have updated tracking abilities to a single computer vrs ip. No vpn will hide what they can track sadly as their programs even detect vpns.

That sounds an awful lot like speculation. Are you even familiar with how the P99 anti-hack works? Why would daybreak need any kind of hardware from P99 to use it? It's done by proxy dll (in dsetup.dll), and the only thing it does (besides fixing old skeleton models and such) is it tells them what programs (.exe/.dll) are hooking into the eqgame.exe process. Which also contains the file paths to those programs, so if you used your real name as your user name they can potentially see that as well (ex: C:/users/john doe/desktop/my mq2 folder/macroquest2.exe). This thread asked how to circumvent the single box per PC restriction and a VM does that just fine. Using a VPN, even if they have the ability to see it, does not express guilt either. Plenty of users, myself included, run a VPN for other legitimate reasons. I've also used both VM + VPN to box on P99s servers in the past and it worked great. Your biggest concerns should be active hacking, RMTing, AFK botting and players reporting you. If you are sensible, you will be fine. Remember that Daybreak survives on the revenue they make off of us playing, they aren't looking to ban people unless they absolutely have to (like people RMTing and cutting directly into their profits).

 

[E9er]

That sounds an awful lot like speculation. Are you even familiar with how the P99 anti-hack works? Why would daybreak need any kind of hardware from P99 to use it? It's done by proxy dll (in dsetup.dll), and the only thing it does (besides fixing old skeleton models and such) is it tells them what programs (.exe/.dll) are hooking into the eqgame.exe process. Which also contains the file paths to those programs, so if you used your real name as your user name they can potentially see that as well (ex: C:/users/john doe/desktop/my mq2 folder/macroquest2.exe). This thread asked how to circumvent the single box per PC restriction and a VM does that just fine. Using a VPN, even if they have the ability to see it, does not express guilt either. Plenty of users, myself included, run a VPN for other legitimate reasons. I've also used both VM + VPN to box on P99s servers in the past and it worked great. Your biggest concerns should be active hacking, RMTing, AFK botting and players reporting you. If you are sensible, you will be fine. Remember that Daybreak survives on the revenue they make off of us playing, they aren't looking to ban people unless they absolutely have to (like people RMTing and cutting directly into their profits).

Because believe it or not p99 was well far more advanced in their tracking abilities then eq was even close to seeing. P99 is capable of doing mass ban sweeps etc with their tracking abilities daybreak could hardly track much but by item id codes and such. Even once parcelled items at one time couldnt even be tracked. I mean they was literally leap years behind on what they could track compared to p99. This is not speculation this is being told to me by a coder himself who ive gotten close with chatting and such. I will say they do not so much care about vpn etc as people use to to stream the web forget to close it what not. But they most certainly know when someone is using one now ive actually had a account suspended for using one while online and forgot i had it open. But once i explained in petition why i had it on and had forgot they understood and warned me to not use it again. But seeing how many people who use vpn pretty much are paying the bills at daybreak its not as serious now. The tracking stuff is solely for phin server with the box codes. It at times is used on tracking krono down to all accounts etc then flagging mac ip. But its pure purpose is to stop mass boxing on phin i was told which we all know there are ways to box there if smart enough. But at times the tracking abils they gained from p99 are used for quite a lot things.

 

[Dobs2017]

Because believe it or not p99 was well far more advanced in their tracking abilities then eq was even close to seeing. P99 is capable of doing mass ban sweeps etc with their tracking abilities daybreak could hardly track much but by item id codes and such. Even once parcelled items at one time couldnt even be tracked. I mean they was literally leap years behind on what they could track compared to p99. This is not speculation this is being told to me by a coder himself who ive gotten close with chatting and such. I will say they do not so much care about vpn etc as people use to to stream the web forget to close it what not. But they most certainly know when someone is using one now ive actually had a account suspended for using one while online and forgot i had it open. But once i explained in petition why i had it on and had forgot they understood and warned me to not use it again. But seeing how many people who use vpn pretty much are paying the bills at daybreak its not as serious now. The tracking stuff is solely for phin server with the box codes. It at times is used on tracking krono down to all accounts etc then flagging mac ip. But its pure purpose is to stop mass boxing on phin i was told which we all know there are ways to box there if smart enough. But at times the tracking abils they gained from p99 are used for quite a lot things.

Every single person using the internet should be using a VPN - All the time. This is about general privacy, now that we know every single thing we do on the internet is logged by ISPs and other agencies. DBGs isn't going to suspend or ban people for using VPNs. While playing EQ, I'm constantly browsing and doing things on the web.

 

[rzek]

Because believe it or not p99 was well far more advanced in their tracking abilities then eq was even close to seeing. P99 is capable of doing mass ban sweeps etc with their tracking abilities daybreak could hardly track much but by item id codes and such. Even once parcelled items at one time couldnt even be tracked. I mean they was literally leap years behind on what they could track compared to p99. This is not speculation this is being told to me by a coder himself who ive gotten close with chatting and such. I will say they do not so much care about vpn etc as people use to to stream the web forget to close it what not. But they most certainly know when someone is using one now ive actually had a account suspended for using one while online and forgot i had it open. But once i explained in petition why i had it on and had forgot they understood and warned me to not use it again. But seeing how many people who use vpn pretty much are paying the bills at daybreak its not as serious now. The tracking stuff is solely for phin server with the box codes. It at times is used on tracking krono down to all accounts etc then flagging mac ip. But its pure purpose is to stop mass boxing on phin i was told which we all know there are ways to box there if smart enough. But at times the tracking abils they gained from p99 are used for quite a lot things.

You claimed they made an agreement for hardware, perhaps you meant software. In either case, I find it hard to believe that a company like Daybreak needs to make a deal with P99 to get their anti-hack code. It's not that advanced. It was a clever implementation for sure, because of how they went about using a proxy .dll so that they wouldn't have to alter copyrighted game files, but the actual code is fairly mundane. I told you how it works, not exactly ground-breaking. Also, there were CSR logs leaked by an ex-P99 GM that got booted from the project around the time that Daybreak made an official agreement with P99, and nowhere was it mentioned that they came to an agreement for the P99 anti-hack code. I think you may have your facts mixed up, because Daybreak did not delay anything for P99, it was the other way around. P99 delayed the launch of Velious on their servers to give Daybreak time to launch their progression server, and in return they officially endorsed P99 and gave them their blessing to continue operating. That was the deal that was made. P99 pushed off dropping a new expansion for daybreak to get higher numbers on their new prog. server, in return for P99 being able to operate their emu server legally. Now, don't get me wrong. I don't doubt that Daybreak implemented better anti-hack detection. Eqmule said so himself and he'd probably know better than anyone besides Daybreak. I just don't understand what argument you're trying to make. Tons of people are using VM's with or without a VPN to box multiple characters on these servers without issue.

 

[posterChild]

They make a fingerprint of your machine.

VPNs won't matter. They can see through that just like P99 GMs can.

 

[eqmule]

Your analysis was spot on posterchild but redguides cant be affiliated with these types of discussions, cause, well, they don't support bypassing these things or active hacks in any form. I need to close the thread before someone posts actual code to circumvent the checks, heh.

I find disassembly and IDA interesting topics though, so feel free to add me on skype: eq.mule

Welcome to redguides btw, you seem like a capable guy,