Bad /rcon login attempt
#1

Apparently I have a person from one IP address who is using a program to get the /rcon PW.

I have the IP number banned from the server and according to logs it has never logged into the game itself. Just constantly sending attempts like 20 ever couple secs or so.

Is this as much as I can do or is there more?
Reply
#2

Quote:

rcon 0/1 If 0 is specified the rcon Remote Console feature is disabled.

Change it to 0, and if you don't have that there then create that line.
For more info: http://en.wikipedia.org/wiki/Server_log

For instance at your server.cfg
Код:
...
rcon_password 123456
rcon 0
...
add/edit rcon 0 in order to disable the Remove Console feature for your server.
Reply
#3

Firstly, if your RCON password is strong enough, using mixed characters, numbers, and symbols brute forcing - attempt made by a program/person to gain a password by trying numerous passwords - will take forever and the hacker will most likely get very bored.

If your password is insecure then you are most likely going to fall victim to this kind of attack.

You can either setup your server.cfg and disable RCON completely, like the above poster, or you can script a method of banning when the RCON attempt failed: OnRconAttempt.
Reply
#4

Thanks to both of you for responding and will put this advice to good work.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)