SafeRCON - Extra security measures for your RCON -
fall3n - 03.09.2014
SafeRCON
Version : v1.0
After learning scripting since a while I'm hereby releasing my first ever work. I didn't want to release a small code so I thought about doing something useful as well as a filterscript which isn't that small.
SafeRCON adds extra security measures for your RCON. RCON is an important part of server administration so it has to be protected very well. Most of them would protect but this script just adds in
extra measures. I actually got most of the ideas inspired from
this topic.
Features
• Complex rcon_password check.
This filterscript does an auto check of your rcon_password set on server.cfg. If your RCON password isn't complex - (By default : It must have 1 capital character, 1 lower char and 1 integer along with the text with atleast the length 12 <You can change the text length inside the script, look below for installation or configuration notes.>) Then it will generate a randomized complex rcon password and ensure if things are alright.
• White Listed IP Addresses
With this filterscript, you can allow only certain IP addresses to login as RCON. If there's no IP addresses defined, then users with any IP address are able to login as RCON in case if they've got the password.
• White Listed Nick Names
Just like how it whitelists IP address, it whitelist nick names also so that players with certain nick names can only login as RCON if they've got the password. In case if they login while their nick isn't mentioned, it will disallow by kicking them out from the server. If there's no names specified, this feature will be ignored.
• Second RCON feature
Unlike other second RCON releases, this one ensures that the second RCON login request is only sent if it's the player who logged in as RCON, not an IP address and also only after ensuring the whitelist checks. I'm using OPRL to make sure if the second RCON request is sent to the right player. Additionally, the script kicks in case if the player tries to evade the second RCON request by means of any commands or chats.
• Logging
SafeRCON logs in everything if something has gone wrong. Logs can be found at "scriptfiles/SafeRCON/".
• Console Commands
This script provides some commands which can be accessed on server console or in-game using "/rcon" command.
Usage:
For console users:
safercon [command] [params]
For in-game users:
/rcon safercon [command] [params]
Commands:
safercon reloadips
safercon reloadnicks
safercon list whitelistip
safercon list whitelistnick
safercon whitelistip [ip]
safercon whitelistnick [nick]
• In-game SafeRCON panel with GUI
There's a SafeRCON panel created using dialogs which assists to change the settings through a panel. It provides the features like that of the ones provided through commands. Use /safercon to access the panel in-game.
Screens
My apologies but due to the lack of time I could only upload the main
SafeRCON panel's picture.
http://s13.postimg.org/aylccrtcm/Screenshot_21.jpg <- Click
Downloads
https://github.com/falle3n/SafeRCON/releases
Credits
fall3n for the complete filterscript.
Lordzy for OPRL, GetRandomizedChars and for helping for the development of this filterscript.
ZeeX for zcmd.
****** for sscanf2.
SA-MP Team for SA-MP.
Re: SafeRCON - Extra security measures for your RCON -
Kyance - 03.09.2014
I doubt anyone would need this much security, but, since I can't find any copies, I see you've put a lot of effort in it, so great job
Re: SafeRCON - Extra security measures for your RCON -
Younes44 - 03.09.2014
Good Job the MEnu it's looking nice
Re: SafeRCON - Extra security measures for your RCON -
zacklogan - 03.09.2014
Good Job
+rep
Re: SafeRCON - Extra security measures for your RCON -
fall3n - 04.09.2014
Quote:
Originally Posted by Kyance
I doubt anyone would need this much security, but, since I can't find any copies, I see you've put a lot of effort in it, so great job 
|
No one might require this much security but this is mainly created for the ones who aren't that experienced or are in need of extra security measures for their RCON. Thanks for your appreciation though.
Quote:
Originally Posted by Younes44
Good Job the MEnu it's looking nice 
|
Quote:
Originally Posted by zacklogan
Good Job
+rep 
|
Thank you.
Re: SafeRCON - Extra security measures for your RCON -
Lordzy - 04.09.2014
Nice work, I'm glad to see this one released. I'm suggesting you to add a timer to check if player has logged into second RCON login after the second RCON login request. So in case if someone tries to evade it by executing RCON commands, it won't go that far if the time has been crossed.
Re: SafeRCON - Extra security measures for your RCON -
SHE790 - 04.09.2014
Nice +Rep
Re: SafeRCON - Extra security measures for your RCON -
Team_PRO - 04.09.2014
nice work for RCON extra protection i might use this.
Re: SafeRCON - Extra security measures for your RCON -
Lumineux - 04.09.2014
Good job

+Rep
Re: SafeRCON - Extra security measures for your RCON -
fall3n - 05.09.2014
Thank you everyone.
Quote:
Originally Posted by Lordzy
Nice work, I'm glad to see this one released. I'm suggesting you to add a timer to check if player has logged into second RCON login after the second RCON login request. So in case if someone tries to evade it by executing RCON commands, it won't go that far if the time has been crossed.
|
Thanks for reminding me about that. I really to get it done but now I've added it on v1.1 of SafeRCON.
SafeRCON has been updated to
v1.1.
- Added : Timer to check if player has logged in as second RCON or not within
the given time.
Download can be found at the main post.