Yeah that sounds like the best method of doing it. I am not sure if someone could hook rcon attempts and make some sort of whitelist system? Through SourceMod or MetaMod or something.
Updating firewall rules would be a PITA for normal server owners and especially GSP's, also with a number of people probably not having static IP's however I'm sure it works well for people who have static IP's and have access to firewalls. -------------------------------------------------- From: "Matthew Lyons" <mly...@internode.com.au> Sent: Monday, June 21, 2010 4:17 PM To: "Half-Life dedicated Win32 server mailing list" <hlds@list.valvesoftware.com> Subject: Re: [hlds] HD Counte Strike Source: RCON HACKER > There are other videos on YT of similar hacks all look to use the same > process. > > 1) Install either a 3rd party plugin or dll to a CSS client installation. > 2) Run the modified CSS client > 3) On CSS client invoke the plugin/hack via console command > 4) Minimise and run a separate windows executable that prompts for a > servers IP:port > 5) After entering an IP:port combination about 4-5 lines of "Decrypting > rcon password" progress bars show > 6) After about 5s the server name, ip and rcon password are displayed > 7) In the video he does this about 4 times and successfully connects to 3 > of the servers (4th had blocked the port so HLSW timed out). > > All related videos on YT showed a similar process. > > Block your rcon ports or setup a firewall allowing only a whitelist of IPs > to pass through it. > > I doubt valve will fix this, they are moving CSS to OB and this is just > another incentive for them to do so. > > -- > Matt Lyons > Content Administrator, games.on.net > Email: m...@games.on.net > Web: http://games.on.net > "In theory, there is no difference between theory and practice; In > practice, there is." > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds