Re: [hlds] Someone took over server

2015-01-22 Thread Stephen Swires
You need direct access to the server if you're going through a GSP, if you don't you're out of luck. You can use Windows Firewall or iptables on Linux to block outgoing TCP connections on port 27015, there's plenty of resources on Google for doing such things. If your server is behind a NAT (some p

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Ok so TCP block. How is this accomplished Sent from my T-Mobile 4G LTE Device Original message From: Stephen Swires Date:01/22/2015 23:06 (GMT-05:00) To: Half-Life dedicated Win32 server mailing list Cc: Subject: Re: [hlds] Someone took over server It's a TCP block,

Re: [hlds] Someone took over server

2015-01-22 Thread Stephen Swires
It's a TCP block, dunno why he said HTTP explicitly because it isn't HTTP. On 23 Jan 2015 04:04, "2xcombatvet" <2xcombat...@gmail.com> wrote: > Ok so I understand everything. So how do I do this HTTP block thing? And > what about programs that need your econ password like GameME stats? > > > Sent

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Ok so I understand everything. So how do I do this HTTP block thing? And what about programs that need your econ password like GameME stats?  Sent from my T-Mobile 4G LTE Device Original message From: Tom Weir Date:01/22/2015 22:50 (GMT-05:00) To: Half-Life dedicated Win

Re: [hlds] Someone took over server

2015-01-22 Thread Nomaan Ahmad
You should use SMAC's RCON Locker and whitelist IP that you want to allow. http://smac.sx/ On 23 January 2015 at 03:50, Tom Weir wrote: > +1 on using source mod where possible > > If you set the rcon password on the command line, it cannot be changed at > runtime. > > > On Jan 22, 2015, at 7:06

Re: [hlds] Someone took over server

2015-01-22 Thread Tom Weir
+1 on using source mod where possible If you set the rcon password on the command line, it cannot be changed at runtime. > On Jan 22, 2015, at 7:06 PM, Korrey Moore wrote: > > You should not be using RCON when other alternatives for server > administration exist like Source Mod. RCON is basic

Re: [hlds] Someone took over server

2015-01-22 Thread David Parker
If you absolutely need to leave RCON enabled, then restricting access to it with a firewall rule is probably the best option. In other Valve games there were server cvars to control the number of failed RCON attempts before a client was banned: sv_rcon_banpenalty sv_rcon_maxfailures sv_rcon_minfa

Re: [hlds] Someone took over server

2015-01-22 Thread Korrey Moore
You should not be using RCON when other alternatives for server administration exist like Source Mod. RCON is basically root access to your server and has almost nil security protection against all sorts of attacks. There have been innumerable RCON exploits exposed over the years on pretty much ev

Re: [hlds] Someone took over server

2015-01-22 Thread Daemon Umbra
Augh, I forgot to say that goes in the launch parameters/arguments box — Sent from Mailbox On Thu, Jan 22, 2015 at 10:01 PM, 2xcombatvet <2xcombat...@gmail.com> wrote: > I don't really know how to block stuff with firewalls and all that. Sorry > Sent from my T-Mobile 4G LTE Device > Ori

Re: [hlds] Someone took over server

2015-01-22 Thread Daemon Umbra
You can set the RCON through the srcds.exe itself I believe, right click and select properties then put +rcon_password as you would in the server.cfg I think it is. — Sent from Mailbox On Thu, Jan 22, 2015 at 10:01 PM, 2xcombatvet <2xcombat...@gmail.com> wrote: > I don't really know how to blo

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
I don't really know how to block stuff with firewalls and all that. Sorry Sent from my T-Mobile 4G LTE Device Original message From: Cody Woodson Date:01/22/2015 21:47 (GMT-05:00) To: Half-Life dedicated Win32 server mailing list Cc: Subject: Re: [hlds] Someone took o

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Yes my password is in my server cfg. Where else would it be? The command list? Sent from my T-Mobile 4G LTE Device Original message From: Cody Woodson Date:01/22/2015 21:47 (GMT-05:00) To: Half-Life dedicated Win32 server mailing list Cc: Subject: Re: [hlds] Someone t

Re: [hlds] Someone took over server

2015-01-22 Thread Cody Woodson
Upload/download exploit possibly. Are you listing your rcon password in your server.cfg? For my community I just block TCP packets to the port 27015 with my firewall and whitelist my IP Sent from my iPhone > On Jan 22, 2015, at 6:24 PM, 2xcombatvet <2xcombat...@gmail.com> wrote: > > Cs go s

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Its a new server no one has anything just me and one other person Sent from my T-Mobile 4G LTE Device Original message From: William Pickard Date:01/22/2015 21:31 (GMT-05:00) To: Half-Life dedicated Win32 server mailing list Cc: Subject: Re: [hlds] Someone took over s

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Yes by steam I'd in admin.cfg Sent from my T-Mobile 4G LTE Device Original message From: William Pickard Date:01/22/2015 21:31 (GMT-05:00) To: Half-Life dedicated Win32 server mailing list Cc: Subject: Re: [hlds] Someone took over server How do you give your admins

Re: [hlds] Someone took over server

2015-01-22 Thread William Pickard
How do you give your admins admin? By steamid I hope On 2015-01-22 9:01 PM, "2xcombatvet" <2xcombat...@gmail.com> wrote: > > Sorry this is for cs go. Ya someone came in and took my server over and even banned my IP address. Had to remove it from the ban file. I will check logs. And what do u mean a

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Cs go server. And yes wondering if there is another way they could get in or did they just really hack my rcon password? And if so is their protection from this happening again Sent from my T-Mobile 4G LTE Device Original message From: Daemon Umbra Date:01/22/2015 20:35

Re: [hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
Sorry this is for cs go. Ya someone came in and took my server over and even banned my IP address. Had to remove it from the ban file. I will check logs. And what do u mean a non game way to access server? Ftp? Sent from my T-Mobile 4G LTE Device Original message From: Peter

Re: [hlds] Someone took over server

2015-01-22 Thread Peter Jerde
What game? Check your logs. It might indicate if there were a bunch of "bad rcon password" attempts before the successful ones came through, or whether the attacker was using some authority granted by one of your plugins (sourcemod or whatnot). Also consider other non-game avenues of connecting

Re: [hlds] Someone took over server

2015-01-22 Thread Daemon Umbra
Your question is a bit confusing. Are you asking if there is a way to stop someone learning your RCON password or are you asking if there is another way they got into your server's console? — Sent from Mailbox On Thu, Jan 22, 2015 at 8:33 PM, 2xcombatvet <2xcombat...@gmail.com> wrote: > I was

[hlds] Someone took over server

2015-01-22 Thread 2xcombatvet
I was getting people to join the server to fill it up and before I joined someone was on my server banning people. He even banned me as I joined. He must have gained access to my econ somehow. I have never gave my econ to no one and no one is set to have access but me. So my question is how do I