04.08.2017, 11:36
Minor improvements of the original thread, i didn't add points though.
And yes, there is STILL room for improvement.
Behaviour related:
Additional steps:
And yes, there is STILL room for improvement.
Behaviour related:
- Do not upload your source code (.pwn / .inc) files
To run your gamemodes / filterscripts, you only need the comiled files, e.g. the .amx files.
So, you don't have to include your source code in your servers directory, don't do it. - Don't randomly grant people permissions (high prmission ranks on your server, forum or whatever). In general, you shouldn't easily trust everyone.
- Be careful, when installing software. Some software might want to harm you.
For example, when installing software made by big companies, you usually don't need to worry, but if you were to download some executeable file, made by some unknown person, you might want to think a little before execute the said file.
- Just to repeat it, be careful with your trust.
- In case you are leaving RCON access enabled, try to choose a secure password: https://en.wikipedia.org/wiki/Random_password_generator
- Setup a specific user, that has less permissions than root, e.g. don't use root.
- Be careful while granting permissions onto your files (don't use read, write and execute permissions everywhere, if not necessary)
- Backup your files, you yourself can choose, how often u decide to do this, the best option would be at least daily.
- Try to keep everything in box, meaning don't unnecessarily communicate over the internet instead of the local network.
- Do not leak your source code; Don't trust people too fast and give them your (complete) source code
- When saving passwords,hash them and preferably add a salt
- Use reliable hosts, e.g. no private hosting or free servers, but known companies instead (search for it using your favourite search engine)
- You might additionally want to add Anti-DeAMX protection to your script
It might be called "Anti-DeAMX", yet, that is not what it does, it simply leads the most used decompiler to result in a fail, anyways, you may use it for additional security.
Additional steps:
- Purchase a https://en.wikipedia.org/wiki/Denial...ributed_attack protection
