Hey all.
At the beginning of January I'm sure everyone noticed a couple of crashes on our legacy server. We checked the game logs and server logs but we didn't know whats was causing it. We tried to move the game server to a different/new installation; we applied the latest OS updates; we disabled our custom LUAs and all of this without fixing the problem. The server kept crashing almost every day for an unknown reason. After a long and really careful investigation, and with really close cooperation with the ET:Legacy development team, we noticed what was connecting all of the crashes together.
We found out someone was able to kill/crash the server but we had no idea how he was doing it. We had an "information embargo" and kept quiet about what we found. We created a trap which redirected this person to a second server running in debug mode. Then the ET:Legacy dev team done awesome work and found what was causing the crashing and created the fix. We applied the fix and from then on the server is stable and working as it was previously.
We honestly need to thank all the time and work Mr, Mini, Eagle and the Legacy devs put in to fixing this.
At the start this person joined our Legacy server, played some games and had a chit-chat with a few our valued players. He realised that his server is nearly empty for the vast majority of the day and he probably wanted to get some players from our server, which is currently most played Legacy mod based server.
So you're asking who this person is now right?
Q'|AlTuM|QuarkClan He is from Quark Clan, from the server which is called "~~~Q'|ETLEGACY OFFICIAL"
https://et.trackbase.net/server/47008/
https://et.trackbase.net/player/6102709/
Details are in the spoiler below.
For others in the gaming community: if you require any other details about the exploit he used and about how to fix the server, we will happily provide you with all the information we have.