[Tutorial] Securing RCON - And what else you can do with it.
#1

About:
The SA:MP RCON System(A.K.A Remote Control System) is a system allowing you to control your server in a basic way. Whether it being kicking, or banning a player or even just changing the server's weather. How-ever, theres some things you should, and should not do with it.

Introduction:
Hello, and welcome to the tutorial. I made a RCON-based tutorial a while back, but I thought I'd make another one with more up-to-date/detailed information! If you find any mistakes, or I don't make something clear just tell me! Thanks.

Securing RCON:
The first step in securing your RCON system for your server is to actually create a password. This isn't difficiult but it can be useless if you don't pick the right password.

Passwords should be:
- Long, and have a lot of different word/number combinations.
- Random
- Don't use words, or phrases just use random numbers/letters/symbols.

Alright, now that you have a good password we can move on to what the rcon line in the server configuration file actually does. This line enables/disables remote access to the system. Basically, it disables you from accessing it out of game. Of-course 0 is enabled, and 1 is disabled. How-ever, they can still log in in-game regardless of what it's set to.

In-Game Login & Security:

The first thing I'd do to secure my in-game RCON system is use a secondary pass system. You can find them all over SA-MP Forums. These allow you to have two passwords for better security.

The next thing you can do is use OnRconLoginAttempt. How-ever it doesn't have the "playerid" param. An example is shown below:

pawn Code:
public OnRconLoginAttempt(ip, password, success)
{
new string[126];
if(!success)
{
format(string, sizeof(string), "IP %s tried to log-in to RCON with password %s, but failed.", ip, password);
print(string);
}
else return 1;
}
Commands and what they do:

Command List:
login [password] - This is used to log-in to RCON(only works in-game).
kick [id] - This is used to kick a player. Names aren't supported, only (player) ID's work.
ban [id] - This is used to ban a player. Names aren't supported, only (player) ID's work.
weather [id] - This is used to set the server's weather.
reloadbans - Used to reload the ban file.
unbanip [ip] - Used to unban an IP(not names).

I will add on-to this if people like what I've done so far.
Reply
#2

Another good RCON security tip is "randoming your letters/jamming your hands in the keyboard, and save it on a .txt file anywhere".

Anyways, nice tutorial!
Reply
#3

I actually did something like this.
https://sampforum.blast.hk/showthread.php?tid=499455
Reply
#4

nice tutorial!
Reply
#5

Lordzy, I don't think I've seen that in a while. Sorry for making the title so close to yours...
Reply


Forum Jump:


Users browsing this thread: 2 Guest(s)