Sad but true they do not have to be playing on a server to send rcon commands.
I wrote a powershell script to monitor my server for frozen or crashed maps. It pings the server every 30 seconds and request info from hlds. If HLDS does not respond to the ping the script will kill HLDS and (optionally) restart it on the last map played. It can be used to send rcon commands! Another program that can be used to send rcon commands is HLSW, I use it when I want to test a few maps. Not sure what you can do to block the hackers, unless rcon commands arrive on a specific port. Then on your servers router you could allow inbound connections to that port only from a specific IP (yours, if you are doing remote admin). Or, disable rcon. With rcon_password "" in server.cfg [google for rcon hacks] _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux

