[FilterScript] SafeRCON - Extra security measures for your RCON
#1

SafeRCON
Version : v1.0
After learning scripting since a while I'm hereby releasing my first ever work. I didn't want to release a small code so I thought about doing something useful as well as a filterscript which isn't that small.

SafeRCON adds extra security measures for your RCON. RCON is an important part of server administration so it has to be protected very well. Most of them would protect but this script just adds in extra measures. I actually got most of the ideas inspired from this topic.

Features
• Complex rcon_password check.
This filterscript does an auto check of your rcon_password set on server.cfg. If your RCON password isn't complex - (By default : It must have 1 capital character, 1 lower char and 1 integer along with the text with atleast the length 12 <You can change the text length inside the script, look below for installation or configuration notes.>) Then it will generate a randomized complex rcon password and ensure if things are alright.
White Listed IP Addresses
With this filterscript, you can allow only certain IP addresses to login as RCON. If there's no IP addresses defined, then users with any IP address are able to login as RCON in case if they've got the password.
White Listed Nick Names
Just like how it whitelists IP address, it whitelist nick names also so that players with certain nick names can only login as RCON if they've got the password. In case if they login while their nick isn't mentioned, it will disallow by kicking them out from the server. If there's no names specified, this feature will be ignored.
Second RCON feature
Unlike other second RCON releases, this one ensures that the second RCON login request is only sent if it's the player who logged in as RCON, not an IP address and also only after ensuring the whitelist checks. I'm using OPRL to make sure if the second RCON request is sent to the right player. Additionally, the script kicks in case if the player tries to evade the second RCON request by means of any commands or chats.
Logging
SafeRCON logs in everything if something has gone wrong. Logs can be found at "scriptfiles/SafeRCON/".
Console Commands
This script provides some commands which can be accessed on server console or in-game using "/rcon" command.
Usage:

For console users:

safercon [command] [params]

For in-game users:

/rcon safercon [command] [params]

Commands:


safercon reloadips
safercon reloadnicks
safercon list whitelistip
safercon list whitelistnick
safercon whitelistip [ip]
safercon whitelistnick [nick]
• In-game SafeRCON panel with GUI

There's a SafeRCON panel created using dialogs which assists to change the settings through a panel. It provides the features like that of the ones provided through commands. Use /safercon to access the panel in-game.
Screens

My apologies but due to the lack of time I could only upload the main SafeRCON panel's picture.

http://s13.postimg.org/aylccrtcm/Screenshot_21.jpg <- Click



Downloads

https://github.com/falle3n/SafeRCON/releases

Credits

fall3n for the complete filterscript.
Lordzy for OPRL, GetRandomizedChars and for helping for the development of this filterscript.
ZeeX for zcmd.
****** for sscanf2.
SA-MP Team for SA-MP.
Reply
#2

I doubt anyone would need this much security, but, since I can't find any copies, I see you've put a lot of effort in it, so great job
Reply
#3

Good Job the MEnu it's looking nice
Reply
#4

Good Job

+rep
Reply
#5

Quote:
Originally Posted by Kyance
Посмотреть сообщение
I doubt anyone would need this much security, but, since I can't find any copies, I see you've put a lot of effort in it, so great job
No one might require this much security but this is mainly created for the ones who aren't that experienced or are in need of extra security measures for their RCON. Thanks for your appreciation though.

Quote:
Originally Posted by Younes44
Посмотреть сообщение
Good Job the MEnu it's looking nice
Quote:
Originally Posted by zacklogan
Посмотреть сообщение
Good Job

+rep
Thank you.
Reply
#6

Nice work, I'm glad to see this one released. I'm suggesting you to add a timer to check if player has logged into second RCON login after the second RCON login request. So in case if someone tries to evade it by executing RCON commands, it won't go that far if the time has been crossed.
Reply
#7

Nice +Rep
Reply
#8

nice work for RCON extra protection i might use this.
Reply
#9

Good job +Rep
Reply
#10

Thank you everyone.

Quote:
Originally Posted by Lordzy
Посмотреть сообщение
Nice work, I'm glad to see this one released. I'm suggesting you to add a timer to check if player has logged into second RCON login after the second RCON login request. So in case if someone tries to evade it by executing RCON commands, it won't go that far if the time has been crossed.
Thanks for reminding me about that. I really to get it done but now I've added it on v1.1 of SafeRCON.

SafeRCON has been updated to v1.1.

- Added : Timer to check if player has logged in as second RCON or not within
the given time.

Download can be found at the main post.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)