SAF Anticheat Rollout & engine settings

Engine settings

These are FiveM engine settings and can only go in server.cfg. SAF Anticheat checks them on start and prints the missing ones, but never sets them.

server.cfg

sv_entityLockdown relaxed                     # clients can't create script entities outside of resources
sv_filterRequestControl 4                     # clients can't take control of entities they don't own
sv_enableNetworkedSounds false                # network sounds from clients are dropped
sv_enableNetworkedPhoneExplosions false       # phone explosions from clients are dropped
sv_enableNetworkedScriptEntityStates false    # only if nothing on your server needs it
sv_pureLevel 1                                # blocks modified game files that give an advantage (2 is stricter)

Rollout

Turning everything on at once on a live server is how real players get kicked. Do it in steps.

1. Shadow mode for a week

Set Config.ShadowMode = true. Every check runs and logs. No action goes past Config.Shadow.MaxAction ('alert'), and only the blocks that can't hurt anyone stay on:

Still blocked in shadow mode	Why it's safe
`ENT_BLACKLIST`	The model just doesn't appear
`EXPL_SILENT`	Invisible and silent explosions have no legit use
`EXPL_BLOCKED`	Explosion types normal play doesn't create
`WEAP_GIVE_OTHER`	The weapon just isn't given

Mark each case as cheater or false positive in the panel. acstats in the server console shows the false positives per code.

2. Tune the checks

For every code with false positives, raise its thresholds, lower its severity or turn it off. Everything is in Configuration.

3. Turn shadow mode off

Kicks now happen for high scores, unless a staff member opens the player in the panel within Config.Score.KickDelay seconds.

4. Turn on automatic bans

When you trust it, set Config.AutoBan = true. Only flags in Config.Certain that meet their "can't be legit" condition ban on their own. See Certain flags.