Invalid cdkey registry

[SGTBASH]

My server is getting this with people login in " invalid cd code" , dont see it with all people but only with some , could this be a thing in the code to keep only legal copies being able to play??

[FlyingWalrus]

Yep!

Excactly what you thought! If a Client connects to a Server, the Server asks the Client for it's CD-Key. The Client transmits the CD-Key to the Server. Then the Server checks with a Gamespy Keyserver if the provided Key really was issued by EA or is a fake one. If it's a real key the Client-Connect continues, if it's a fake/wrong Key the Server disconnects the Client with the Error-Message 'invalid CD-Key' and also writes 'xxx.xxx.xxx.xxx. invalid CD-Key' to the Console.

see this:
[code:1]
No: 21
Timestamp: 18:25:35:017
MAC source address: 00:02:B3:B2:1C:20
MAC dest address: 00:10:A7:01:76:CE
Frame type: IP
Protocol: UDP->12203
Source IP address: xxx.xxx.xxx.xxx (BT Client)
Dest IP address: xxx.xxx.xxx.xxx (BT Server)
Source port: 27429
Destination port: 12203
SEQ: ---
ACK: ---
Packet size: 60

Packet data:
0000: 00 10 A7 01 76 CE 00 02 B3 B2 1C 20 08 00 45 00 ....v...... ..E.
0010: 00 2D 59 67 00 00 77 11 E9 B4 D4 CA 48 EC 51 D1 .-Yg..w.....H.Q.
0020: 91 1C 6B 25 2F AB 00 19 F7 C9 FF FF FF FF 02 67 ..k%/..........g
0030: 65 74 63 68 61 6C 6C 65 6E 67 65 00 etchallenge.

================================================== ===================

No: 22
Timestamp: 18:25:35:017
MAC source address: 00:10:A7:01:76:CE
MAC dest address: 00:02:B3:B2:1C:20
Frame type: IP
Protocol: UDP->12203
Source IP address: xxx.xxx.xxx.xxx (BT Server)
Dest IP address: xxx.xxx.xxx.xxx (BT Client)
Source port: 12203
Destination port: 27429
SEQ: ---
ACK: ---
Packet size: 62

Packet data:
0000: 00 02 B3 B2 1C 20 00 10 A7 01 76 CE 08 00 45 00 ..... ....v...E.
0010: 00 30 BF 5C 00 00 80 11 7A BC 51 D1 91 1C D4 CA .0.\....z.Q.....
0020: 48 EC 2F AB 6B 25 00 1C 0D B8 FF FF FF FF 01 67 H./.k%.........g
0030: 65 74 4B 65 79 20 4B 4C 51 4B 4A 43 44 4D etKey KLQKJCDM

================================================== ===================

No: 23
Timestamp: 18:25:35:117
MAC source address: 00:02:B3:B2:1C:20
MAC dest address: 00:10:A7:01:76:CE
Frame type: IP
Protocol: UDP->12203
Source IP address: xxx.xxx.xxx.xxx (BT Client)
Dest IP address: xxx.xxx.xxx.xxx (BT Server)
Source port: 27429
Destination port: 12203
SEQ: ---
ACK: ---
Packet size: 133

Packet data:
0000: 00 10 A7 01 76 CE 00 02 B3 B2 1C 20 08 00 45 00 ....v...... ..E.
0010: 00 77 59 68 00 00 77 11 E9 69 D4 CA 48 EC 51 D1 .wYh..w..i..H.Q.
0020: 91 1C 6B 25 2F AB 00 63 FD 75 FF FF FF FF 02 61 ..k%/..c.u.....a
0030: 75 74 68 6F 72 69 7A 65 54 68 69 73 20 35 36 36 uthorizeThis 566
0040: 64 61 63 36 33 36 62 61 30 38 33 62 64 32 36 30 dac636ba083bd260
0050: 36 62 64 36 37 61 38 62 38 32 32 63 39 30 33 38 6bd67a8b822c9038
0060: 65 32 37 33 62 31 62 31 64 65 63 31 63 31 36 38 e273b1b1dec1c168
0070: 65 33 64 37 61 66 65 62 62 30 32 35 62 32 31 36 e3d7afebb025b216
0080: 66 61 38 30 30 fa800

================================================== ===================

No: 24
Timestamp: 18:25:35:117
MAC source address: 00:10:A7:01:76:CE
MAC dest address: 00:02:B3:B2:1C:20
Frame type: IP
Protocol: UDP->1492
Source IP address: xxx.xxx.xxx.xxx (BT Server)
Dest IP address: 216.144.239.34 (key.gamespy.com)
Source port: 1492
Destination port: 29910
SEQ: ---
ACK: ---
Packet size: 171

Packet data:
0000: 00 02 B3 B2 1C 20 00 10 A7 01 76 CE 08 00 45 00 ..... ....v...E.
0010: 00 9D BF 5F 00 00 80 11 D0 4F 51 D1 91 1C D8 90 ..._.....OQ.....
0020: EF 22 05 D4 74 D6 00 89 54 D7 3B 00 18 11 1B 2C ."..t...T.;....,
0030: 25 17 08 09 39 4B 40 4B 3B 02 05 39 38 3C 28 2C %...9K@K;..98.(,
0040: 2B 2E 21 3E 2C 0B 02 12 1D 39 46 46 4F 03 00 0E +.!.,....9FFO...
0050: 53 40 46 1B 06 51 55 56 11 14 4B 51 51 5B 07 17 S@F..QUV..KQQ[..
0060: 46 4E 06 59 0F 5D 41 42 1A 5E 51 5E 5D 16 42 4E FN.Y.]AB.^Q^].BN
0070: 54 03 5C 07 42 14 1C 04 50 0E 54 45 48 1C 54 05 T.\.B...P.TEH.T.
0080: 5A 04 15 15 1B 05 51 5F 50 11 42 48 51 07 0C 5D Z.....Q_P.BHQ..]
0090: 43 40 25 0E 11 31 48 40 43 49 50 56 5E 5D 43 44 C@%..1H@CIPV^]CD
00A0: 25 14 0A 08 1C 2F 41 4D 54 57 5E %..../AMTW^

================================================== ===================

No: 25
Timestamp: 18:25:35:367
MAC source address: 00:02:B3:B2:1C:20
MAC dest address: 00:10:A7:01:76:CE
Frame type: IP
Protocol: UDP->1492
Source IP address: 216.144.239.34 (key.gamespy.com)
Dest IP address: xxx.xxx.xxx.xxx (BT Server)
Source port: 29910
Destination port: 1492
SEQ: ---
ACK: ---
Packet size: 117

Packet data:
0000: 00 10 A7 01 76 CE 00 02 B3 B2 1C 20 08 00 45 00 ....v...... ..E.
0010: 00 67 90 EA 00 00 6C 11 12 FB D8 90 EF 22 51 D1 .g....l......"Q.
0020: 91 1C 74 D6 05 D4 00 53 B5 AB 3B 14 03 0A 18 2C ..t....S..;....,
0030: 25 04 05 31 50 45 46 1D 06 02 5B 56 45 12 18 57 %..1PEF...[VE..W
0040: 59 5E 07 17 42 4F 57 57 0F 01 45 47 18 5F 03 55 Y^..BOWW..EG._.U
0050: 57 41 13 40 3B 12 06 00 0A 2C 48 53 52 5B 56 2F WA.@;....,HSR[V/
0060: 15 0B 15 0C 1E 02 2F 39 17 11 00 01 0C 17 50 3A ....../9......P:
0070: 23 41 26 00 0A #A&..

================================================== ===================

No: 26
Timestamp: 18:25:35:407
MAC source address: 00:10:A7:01:76:CE
MAC dest address: 00:02:B3:B2:1C:20
Frame type: IP
Protocol: UDP->12203
Source IP address: xxx.xxx.xxx.xxx (BT Server)
Dest IP address: xxx.xxx.xxx.xxx (BT Client)
Source port: 12203
Destination port: 27429
SEQ: ---
ACK: ---
Packet size: 99

Packet data:
0000: 00 02 B3 B2 1C 20 00 10 A7 01 76 CE 08 00 45 00 ..... ....v...E.
0010: 00 55 BF 64 00 00 80 11 7A 8F 51 D1 91 1C D4 CA .U.d....z.Q.....
0020: 48 EC 2F AB 6B 25 00 41 FA 3B FF FF FF FF 01 64 H./.k%.A.;.....d
0030: 72 6F 70 65 72 72 6F 72 0A 53 65 72 76 65 72 20 roperror.Server
0040: 72 65 6A 65 63 74 65 64 20 63 6F 6E 6E 65 63 74 rejected connect
0050: 69 6F 6E 3A 0A 49 6E 76 61 6C 69 64 20 43 44 20 ion:.Invalid CD
0060: 4B 65 79 Key

================================================== ===================
[/code:1]

if whyever you don't like your Server doing Keychecks with Gamespy, block it's UDP access to key.gamespy.com Port 29910 :) This can be done with a simple IPSec Rule on Windows2000 or a filter Rule with IPChains/IPTables on Linux.

[SGTBASH]

If you could explain how i can due that with the xp home operating system running through a hub(no router) i would be much grateful i am realtivly green at doing something like that

[Oracleman]

This was also a problem with Spearhead half-a-year-or-so ago. It blocked perfectly legal CD-keys too, even blocked me from joining my own server. Blocking 29910 solved it back then - search for those threads containg "invalid CD-Key" or something. There might be an explanation on how to do this.

There are also free software packages out there supplying this functionality.

GL

[FlyingWalrus]

I doubt Windows XP Home has the IPSec Functionality. Windows XP Pro has it.

Here how you could do it with Windows XP Home or even Windows 98/Me:

[list=1]
surf to www.kerio.com and download the Kerio Personal Firewall. It's free for personal use. Or just click here (http://www.kerio.com/dwn/kpf2-en-win.exe).
download the filterrules-conf file from me here (http://dump.iam3.de/rules.conf).
install Kerio Personal Firewall and reboot your Computer.
go to the Firewall Administration (rightclick on the Shield-like TrayIcon and select Administration).
in the Firewall Tab, uncheck the Firewall enabled box and click Apply.
now click on the Miscellaneos Tab.
click the Load Button and select the rules.conf file you just downloaded.
go back to the Firewall Tab, check the Firewall enabled box, click the Apply and then the Advanced... Button.
now you should see there 2 Rules in the Filter RUles Tab. The 1st one is blocking the Computers Access to the
IP 216.144.239.34 Port 29910 (key.gamespy.com). The 2nd one allows all other Traffic. It should look like that:
http://dump.iam3.de/firewall.jpg
close all Windows, you are set.
[/list:o]

[Blitzkrieg]

Well this worked for me, but not others. Also, could there be a seperate(secondary) port??

[FlyingWalrus]

afaik there is only Port 29910 on key.gamespy.com. Never seen my server trying to connect to another one.

[Blitzkrieg]

Ok, ty, reason I asked, some of us got this to work, and then others are still having problems. Maybe they are on a firewall or router, and trying to use this with one or both of those, and that maybe be the problem, thanx for the quick response............

[Six]

Following this guide solved the "invalid cd key", but created a new one...

Now my other computer is unable to access the internet, so I cant play on my own server...

My connection is as follows:

512 Kb/s ADSL in to my game server, from there to my regular computer via networkcards. I have one IP to the net, and one "intern" between the regular and the server.

When I apply these rules, the internet connection dies on my regular comp, which is the one I play my games on. As soon as I shut down the firewall, all is back to normal.

Funny thing is, that the firewall doesn't ask me anything when I try to connect, like it does with other applications and programs...

i thought the second rule was to make sure that all other traffic flows as it would normally?

Any ideas anyone? Thankful for all help!

[LSG_Da_Bears]

Sixpack....Do you have a router?


Makes it easier to get one and dmz your game server. Then you can keep yours behind the router, set up a firewall on your comp and should be able to do whatever you want. The game server will be completely exposed if you do this, so keep a virus software on it and make sure it does not have access through the network to your computer.

[SGTBASH]

Walrus i did everything you said and i see all the same settings and stuff but i still see the invalid cd key coming up on the console. I dont no if this matters but my connection is running through a hub (not a router) and i due have 2 ip addresses. 1 ip is running the server the other is running my playing comp

[Merek]

No matter what server i connect to i get Server timed out and no matter irs its Allied Assault, Spearhead or Breakthrough, i have a Router and the mOH ports 12203 and 12300 are open but its not working.

[alibalex]

Hi all,

I have run a spearhead server from the first day it was available and we also had the problem with the invalid CD-key's.
After blocking the 29910 UDP-port in my router it was fine.

But now i switch to Breakthrough and i again get the Invalid CD-key problem.
The UDP-port 29910 is Still blocked (i even made an extra filter for it)
So EA must have changed something cause the port is blocked and i still get the invalid CD-key message.
(yes it's a full legal version).

Does anyone has a different solution (another port or something).

[Irksome]

Apparently Gamespy have screwed up their cd key servers, and a lot of valid keys have been blocked too - its just a question of waiting for it to be sorted out.

[Oracleman]

OK, than it's the same story as for SH a year ago.

[Mazzic]

Don't block by port number as it appears to be different for various servers. Block on the key.gamespy.com ip number.

My server was trying to send using port number 29700.

[FlyingWalrus]

Don't block by port number as it appears to be different for various servers. Block on the key.gamespy.com ip number.

My server was trying to send using port number 29700.

erm no!

29700 is the Status Port of Gamespy, used to update your Server Stats in Gamespy Listing.

Note: master.gamespy.com and key.gamespy.com is one and the same server (216.144.239.34)

[Mazzic]

Hey Walrus, I'm sure you know this..but your absolutely correct.. :>

If I would have entered my rule correctly... I accidently set it up on the local end rather than the remote endpoint.

Block port 29910 on the remote endpoint and it wil be fine. If you block by the key server ip number, it will work also,, but you will not be displayed in Gamespy either.

Another thing I noticed was once a server auth's or rejects you, it keeps a cache and doesn't do a relookup. Not sure how big that cache is, bouncing the server does clear it though. So if you have your server up and running already and turn on the block, be sure to restart the server to clear this cache. Otherwise it will look as if your filter rule isn't working.

[Scruge1]

well same as SH i cant login to my server invalid cdkey lmao and im usiing a different key and it is valid this is ****en Bullshit

[Six]

I managed to solve my problem by using Sygate Personal Firewall instead of Kerio. :D

[FlyingWalrus]

Another thing I noticed was once a server auth's or rejects you, it keeps a cache and doesn't do a relookup. Not sure how big that cache is, bouncing the server does clear it though. So if you have your server up and running already and turn on the block, be sure to restart the server to clear this cache. Otherwise it will look as if your filter rule isn't working.

That's correct, the Server caches the CD-Keys until it's restarted. So when a Client with a cached Key connects to the Server there is no lookup done.

[sKsShayne]

Thank you all for the help....but can anyone tell me how to configure Norton Internet security's firewall to allow this? I've tried a bunch of things but I still get the Invalid cd notice. Any help would be greatly appreciated.

[alibalex]

As i posted before in this topic, i still had the invalid CD-key problem on my server after blocking port 29910.

I did some research with a sniffer and found that the Breakthrough server uses different port for sending the autherisation request to EA each time the server starts up.
I found my server first using port 3145, later port 3148, and now its using 3151 to send the request to the masterserver (still on port 29910).
So i tried blocking a range of ports (from 3100-3200) and NO MORE INVALID CD-key SHIT. :D :D :D :D

So maybe for others this info might be usefull.
It helped me i hope it helps you all to.

-----EDIT-----
I noticed the port used by mohaab to check CD-key is now already 3461
So take a bigger range (i put it to 3000-3900)
-----EDIT-----

[Oracleman]

My server started blocking perfectly good cd-keys again. It appears they have switched IP on the gamespy nodes our blocks are set on. New IP is 207.38.8.34

Unfortunately my firewall can't block by hostname, but a switch of addresses fixed it again. :hug:

[Six]

Hi,

I tried the new IP, and it's right, but on what port number? 29910 doesn't work anymore...

[W_Irwing]

Just wanted to let you server admins know that you might as well block access to key.gamespy.com using the hosts file on the Windows platform.

Search for a file named "hosts", it should be located in your Windows folder, or in any of the subfolders (windows\system32\drivers\etc\) on Window XP (Pro).

Using your favourite text editor, such as Notepad, add the following line to the file:
127.0.0.1 key.gamespy.com

This will force any request to key.gamespy.com to be sent to your own PC.. :P

[josephwahib2005]

thanx