It's also our policy to set rcon on the command line. Makes things much more secure.
On Dec 10, 2011 4:37 PM, "Team BOOM!" <[email protected]> wrote: > > I no longer use the rcon_password setting in any server-side cfg files. A while back there was an exploit that was released where people could take over a server when it was done this way. I'm not exactly sure how and don't know if this is still an issue, but somehow they were able to grab the info from the server.cfg, I believe. It happened to us once and since I changed it, no one has successfully taken over our servers again. > > I now only set the rcon password for my servers in their command line by adding "+rcon_password" parameter. You may wish to look into this for your servers as well. Just a thought. > > Take care. > > ________________________________ > From: [email protected] [mailto: [email protected]] On Behalf Of Eli Witt > Sent: Saturday, December 10, 2011 12:08 PM > To: Half-Life dedicated Win32 server mailing list > Subject: Re: [hlds] TF2: rcon stops working > > When you send the password initially, the server sees you as an admin and allows rcon commands from you. Your client doesn't send the rcon password every time you send a command, and you don't need to retype it before every command. > > Obviously the server resets it's admin list when the rcon list is reset. > > > On Sat, Dec 10, 2011 at 2:11 PM, Brian <[email protected]> wrote: >> >> Thanks for the help guys, I will try what you suggest. However, I still don't see why this issue arises if the client still has the correct password stored (cf. autocompleted value). Granted, the RCON connection may be reset, but if the password is saved then it should be able to re-establish it as necessary, no? >> >> >> On Sat, Dec 10, 2011 at 5:47 PM, Saul Rennison <[email protected]> wrote: >>> >>> So put your server's RCON password in autoexec instead, is what Sebastian is suggesting. >>> >>> On Saturday, December 10, 2011, Sebastian Staudt <[email protected]> wrote: >>> > From users of my RCON library I know that setting rcon_password in the server.cfg is sub-optimal. After a map change the server.cfg is reloaded and will – although the password is not changed – reset any RCON connections. >>> > Source uses TCP (and persistent connections) for RCON. It seems like rcon_password will automatically reset all connected RCON clients. >>> > >>> > Am Samstag, 10. Dezember 2011 um 16:23 schrieb Brian: >>> > >>> > When I set a the rcon_password in console to use on my server, it seems to stop working after the first command, or some length of time. >>> > >>> > Eg I do >>> > >>> > rcon_password password >>> > rcon exec etf2l >>> > >>> > then play some… then when wanting to go the next map I try >>> > >>> > rcon changelevel cp_snakewater >>> > >>> > … and it does nothing. >>> > >>> > I have to do >>> > >>> > rcon_password password >>> > rcon changelevel cp_snakewater >>> > >>> > to get it to work. >>> > >>> > The weird thing is, the stored value of rcon_password is still correct, ie it shows “rcon_password password” as the tab-complete when I start reentering the command. >>> > >>> > Is there like some kind of timeout as in sudo where you just have to enter your password again? >>> > >>> > _______________________________________________ >>> > To unsubscribe, edit your list preferences, or view the list archives, please visit: >>> > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds >>> > >>> >>> -- >>> >>> >>> Kind regards, >>> Saul Rennison >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, please visit: >>> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds >>> >> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, please visit: >> https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds >> > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds >
_______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds
