Re: [hlds] Someone took over server

2015-01-23 Thread Jesse Oak
Make sure you also have sv_workshop_allow_other_maps 0 otherwise someone
may be able to load a malicious map onto the server.
On Jan 23, 2015 10:12 AM, Nomaan Ahmad n0man@gmail.com wrote:

 OP mentioned about allowing gameme's rcon connection, so this plugin will
 help him.
 TCP can be spoofed? I thought that was true for UDP.

 I have had similar server hijackings in the past, this plugin helped.
 Blocking off rcon by using rcon_password  or disabling TCP altogether
 might have same effects but you cant use sourcebans or gameme/hlstatsx
 after that.

 On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com wrote:

  You should use SMAC's RCON Locker and whitelist IP that you want to
 allow.
 
  http://smac.sx/

 Whitelisting home connections is rather pointless since the majority have
 dynamic IP addresses that constantly change. Then there's the problem that
 IP addresses can be easily spoofed.

  It's a TCP block, dunno why he said HTTP explicitly because it isn't
 HTTP.

 Yeah excuse me on that, I work with all sorts of routers that use HTTP
 and TCP interchangeably in the firmware and wasn't thinking.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread 2xcombatvet
Does it matter if ur not running a workshop server


Sent from my T-Mobile 4G LTE Device


 Original message 
From: Jesse Oak wazanato...@gmail.com 
Date:01/23/2015  12:24  (GMT-05:00) 
To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com 
Cc:  
Subject: Re: [hlds] Someone took over server 

Make sure you also have sv_workshop_allow_other_maps 0 otherwise someone may be 
able to load a malicious map onto the server.

On Jan 23, 2015 10:12 AM, Nomaan Ahmad n0man@gmail.com wrote:
OP mentioned about allowing gameme's rcon connection, so this plugin will help 
him.
TCP can be spoofed? I thought that was true for UDP.

I have had similar server hijackings in the past, this plugin helped. Blocking 
off rcon by using rcon_password  or disabling TCP altogether might have same 
effects but you cant use sourcebans or gameme/hlstatsx after that.

On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com wrote:
 You should use SMAC's RCON Locker and whitelist IP that you want to allow.
 
 http://smac.sx/

Whitelisting home connections is rather pointless since the majority have 
dynamic IP addresses that constantly change. Then there's the problem that IP 
addresses can be easily spoofed.

 It's a TCP block, dunno why he said HTTP explicitly because it isn't HTTP.

Yeah excuse me on that, I work with all sorts of routers that use HTTP and TCP 
interchangeably in the firmware and wasn't thinking.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Azarus X
Stop using asd123 as rcon passsword... Can we please move on?

On 23 January 2015 at 18:54, 2xcombatvet 2xcombat...@gmail.com wrote:

 Does it matter if ur not running a workshop server


 Sent from my T-Mobile 4G LTE Device


  Original message 
 From: Jesse Oak wazanato...@gmail.com
 Date:01/23/2015 12:24 (GMT-05:00)
 To: Half-Life dedicated Win32 server mailing list 
 hlds@list.valvesoftware.com
 Cc:
 Subject: Re: [hlds] Someone took over server

 Make sure you also have sv_workshop_allow_other_maps 0 otherwise someone
 may be able to load a malicious map onto the server.
 On Jan 23, 2015 10:12 AM, Nomaan Ahmad n0man@gmail.com wrote:

 OP mentioned about allowing gameme's rcon connection, so this plugin will
 help him.
 TCP can be spoofed? I thought that was true for UDP.

 I have had similar server hijackings in the past, this plugin helped.
 Blocking off rcon by using rcon_password  or disabling TCP altogether
 might have same effects but you cant use sourcebans or gameme/hlstatsx
 after that.

 On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com wrote:

  You should use SMAC's RCON Locker and whitelist IP that you want to
 allow.
 
  http://smac.sx/

 Whitelisting home connections is rather pointless since the majority
 have dynamic IP addresses that constantly change. Then there's the problem
 that IP addresses can be easily spoofed.

  It's a TCP block, dunno why he said HTTP explicitly because it isn't
 HTTP.

 Yeah excuse me on that, I work with all sorts of routers that use HTTP
 and TCP interchangeably in the firmware and wasn't thinking.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread ics
It does. By default, your server will accept any map to be ran on it 
unless you set sv_workshop_allow_other_maps to 0.


-ics

2xcombatvet kirjoitti:

Does it matter if ur not running a workshop server


Sent from my T-Mobile 4G LTE Device


 Original message 
From: Jesse Oak wazanato...@gmail.com
Date:01/23/2015 12:24 (GMT-05:00)
To: Half-Life dedicated Win32 server mailing list 
hlds@list.valvesoftware.com

Cc:
Subject: Re: [hlds] Someone took over server

Make sure you also have sv_workshop_allow_other_maps 0 otherwise 
someone may be able to load a malicious map onto the server.


On Jan 23, 2015 10:12 AM, Nomaan Ahmad n0man@gmail.com 
mailto:n0man@gmail.com wrote:


OP mentioned about allowing gameme's rcon connection, so this
plugin will help him.
TCP can be spoofed? I thought that was true for UDP.

I have had similar server hijackings in the past, this plugin
helped. Blocking off rcon by using rcon_password  or disabling
TCP altogether might have same effects but you cant use sourcebans
or gameme/hlstatsx after that.

On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com
mailto:ajac...@gmail.com wrote:

 You should use SMAC's RCON Locker and whitelist IP that you want to 
allow.

 http://smac.sx/

Whitelisting home connections is rather pointless since the
majority have dynamic IP addresses that constantly change.
Then there's the problem that IP addresses can be easily spoofed.

 It's a TCP block, dunno why he said HTTP explicitly because
it isn't HTTP.

Yeah excuse me on that, I work with all sorts of routers that
use HTTP and TCP interchangeably in the firmware and wasn't
thinking.

___
To unsubscribe, edit your list preferences, or view the list
archives, please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list
archives, please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Kevin C
Sourcemods RCON has limitations. Try getting a full status output with 
sm_rcon, or anything that returns a lot of information.


External plugins or logging tools(HLStats, GameME, Sourcebans) also 
require RCON.

On 1/23/2015 4:14 PM, Weasels Lair wrote:
I don't understand why people even enable RCON any more.  That's what 
SourceMod and AMX-Mod-X are for.  Just use those to lock it down to 
which players SteamID's will be your admins.



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Weasels Lair
I don't understand why people even enable RCON any more.  That's what
SourceMod and AMX-Mod-X are for.  Just use those to lock it down to which
players SteamID's will be your admins.
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread 2xcombatvet
Thanks everyone! Much love. Been a big help


Sent from my T-Mobile 4G LTE Device


 Original message 
From: ics i...@ics-base.net 
Date:01/23/2015  16:05  (GMT-05:00) 
To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com 
Cc:  
Subject: Re: [hlds] Someone took over server 

It does. By default, your server will accept any map to be ran on it 
unless you set sv_workshop_allow_other_maps to 0.

-ics

2xcombatvet kirjoitti:
 Does it matter if ur not running a workshop server


 Sent from my T-Mobile 4G LTE Device


  Original message 
 From: Jesse Oak wazanato...@gmail.com
 Date:01/23/2015 12:24 (GMT-05:00)
 To: Half-Life dedicated Win32 server mailing list 
 hlds@list.valvesoftware.com
 Cc:
 Subject: Re: [hlds] Someone took over server

 Make sure you also have sv_workshop_allow_other_maps 0 otherwise 
 someone may be able to load a malicious map onto the server.

 On Jan 23, 2015 10:12 AM, Nomaan Ahmad n0man@gmail.com 
 mailto:n0man@gmail.com wrote:

 OP mentioned about allowing gameme's rcon connection, so this
 plugin will help him.
 TCP can be spoofed? I thought that was true for UDP.

 I have had similar server hijackings in the past, this plugin
 helped. Blocking off rcon by using rcon_password  or disabling
 TCP altogether might have same effects but you cant use sourcebans
 or gameme/hlstatsx after that.

 On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com
 mailto:ajac...@gmail.com wrote:

  You should use SMAC's RCON Locker and whitelist IP that you want to 
 allow.
 
  http://smac.sx/

 Whitelisting home connections is rather pointless since the
 majority have dynamic IP addresses that constantly change.
 Then there's the problem that IP addresses can be easily spoofed.

  It's a TCP block, dunno why he said HTTP explicitly because
 it isn't HTTP.

 Yeah excuse me on that, I work with all sorts of routers that
 use HTTP and TCP interchangeably in the firmware and wasn't
 thinking.

 ___
 To unsubscribe, edit your list preferences, or view the list
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



 ___
 To unsubscribe, edit your list preferences, or view the list
 archives, please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Crazed Gunman
I used it predominantly because I could fix something from at work without
having to ssh into my box. I also set the password in-line and not the
config to prevent the upload-download exploit from being a problem.
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Kit Parenteau
Whitelisting home connections is rather pointless since the majority 
have dynamic IP addresses that constantly change. Then there's the 
problem that IP addresses can be easily spoofed.


The inbound packets can be source-spoofed, but full TCP links and return 
UDP will not reach the spoofer unless ARP poisoning or something similar 
enough is used. In cases of UDP being listened to without caring whether 
the reply gets to where it's supposed to go, spoofing will work. TCP? 
Not so much unless you can get into the network between the source and 
the destination and even then it's a pain. Home IP addresses changing is 
a challenge though.


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread William Pickard
As already stated by Crazed Gunman, things like Source Query,
SourceBans, Gameme/HLStatsX:CE require the engine's rcon to run
commands on the server.

On Fri, Jan 23, 2015 at 4:14 PM, Weasels Lair wea...@weaselslair.com wrote:
 I don't understand why people even enable RCON any more.  That's what
 SourceMod and AMX-Mod-X are for.  Just use those to lock it down to which
 players SteamID's will be your admins.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread 2xcombatvet
I have tried to ban people but the steam I'd doesn't stay in the file it 
disappears after use banid 0 steam_### then writeid. Didn't work


Sent from my T-Mobile 4G LTE Device


 Original message 
From: Kevin C s...@serveredirect.com 
Date:01/23/2015  21:16  (GMT-05:00) 
To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com 
Cc:  
Subject: Re: [hlds] Someone took over server 

That's good for you, but some communities need it.

RCON is fine if used properly, like issuing IP bans for failed attempts etc.

In CS:GO sv_allowdownload and sv_allowupload can be set to 0 anyway to fix any 
download exploits since it doesn't support sprays and you should be used 
workshop/fastdl anyway.


On 1/23/2015 9:12 PM, Weasels Lair wrote:
I run hlstats and sourcebans without rcon and do without the rcon integration.

On Jan 23, 2015 4:20 PM, William Pickard lollol22...@gmail.com wrote:
As already stated by Crazed Gunman, things like Source Query,
SourceBans, Gameme/HLStatsX:CE require the engine's rcon to run
commands on the server.

On Fri, Jan 23, 2015 at 4:14 PM, Weasels Lair wea...@weaselslair.com wrote:
 I don't understand why people even enable RCON any more.  That's what
 SourceMod and AMX-Mod-X are for.  Just use those to lock it down to which
 players SteamID's will be your admins.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Kevin C

That's good for you, but some communities need it.

RCON is fine if used properly, like issuing IP bans for failed attempts etc.

In CS:GO sv_allowdownload and sv_allowupload can be set to 0 anyway to 
fix any download exploits since it doesn't support sprays and you should 
be used workshop/fastdl anyway.



On 1/23/2015 9:12 PM, Weasels Lair wrote:


I run hlstats and sourcebans without rcon and do without the rcon 
integration.


On Jan 23, 2015 4:20 PM, William Pickard lollol22...@gmail.com 
mailto:lollol22...@gmail.com wrote:


As already stated by Crazed Gunman, things like Source Query,
SourceBans, Gameme/HLStatsX:CE require the engine's rcon to run
commands on the server.

On Fri, Jan 23, 2015 at 4:14 PM, Weasels Lair
wea...@weaselslair.com mailto:wea...@weaselslair.com wrote:
 I don't understand why people even enable RCON any more. That's what
 SourceMod and AMX-Mod-X are for.  Just use those to lock it down
to which
 players SteamID's will be your admins.

 ___
 To unsubscribe, edit your list preferences, or view the list
archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list
archives, please visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Weasels Lair
I run hlstats and sourcebans without rcon and do without the rcon
integration.
On Jan 23, 2015 4:20 PM, William Pickard lollol22...@gmail.com wrote:

 As already stated by Crazed Gunman, things like Source Query,
 SourceBans, Gameme/HLStatsX:CE require the engine's rcon to run
 commands on the server.

 On Fri, Jan 23, 2015 at 4:14 PM, Weasels Lair wea...@weaselslair.com
 wrote:
  I don't understand why people even enable RCON any more.  That's what
  SourceMod and AMX-Mod-X are for.  Just use those to lock it down to which
  players SteamID's will be your admins.
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread 2xcombatvet
And write know I don't know how to properly use or install sourceban. 


Sent from my T-Mobile 4G LTE Device


 Original message 
From: Kevin C s...@serveredirect.com 
Date:01/23/2015  21:16  (GMT-05:00) 
To: Half-Life dedicated Win32 server mailing list hlds@list.valvesoftware.com 
Cc:  
Subject: Re: [hlds] Someone took over server 

That's good for you, but some communities need it.

RCON is fine if used properly, like issuing IP bans for failed attempts etc.

In CS:GO sv_allowdownload and sv_allowupload can be set to 0 anyway to fix any 
download exploits since it doesn't support sprays and you should be used 
workshop/fastdl anyway.


On 1/23/2015 9:12 PM, Weasels Lair wrote:
I run hlstats and sourcebans without rcon and do without the rcon integration.

On Jan 23, 2015 4:20 PM, William Pickard lollol22...@gmail.com wrote:
As already stated by Crazed Gunman, things like Source Query,
SourceBans, Gameme/HLStatsX:CE require the engine's rcon to run
commands on the server.

On Fri, Jan 23, 2015 at 4:14 PM, Weasels Lair wea...@weaselslair.com wrote:
 I don't understand why people even enable RCON any more.  That's what
 SourceMod and AMX-Mod-X are for.  Just use those to lock it down to which
 players SteamID's will be your admins.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


[hlds] Vote kicking admin

2015-01-23 Thread 2xcombatvet
Game CSGo
Steam desktop

My problem is that every time my server is about to be full a couple of not so 
good people come on and start vote kicking people and kicking me while I have 
full admin access. Is there a plugin for this solution? I have sv allow votes 
turned off until I find a solution. I have tried using a plugin to stop voting 
while admin is on server but didn't keep it on long enough. 
I also can't find the config file that adjust sourcemod voting options. 

I have researched this with no luck. 
That's why I am here asking. 
Thanks everyone. 


Sent from my T-Mobile 4G LTE Device
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Kevin C
Sorry, I meant properly using the engines built in ban system for failed 
login attempts. On our servers I think we allow 5 failed attempts before 
we IP ban for an hour.



On 1/23/2015 11:20 PM, Korrey Moore wrote:
 RCON is fine if used properly, like issuing IP bans for failed 
attempts etc.


You don't need RCON to issue an IP ban. Why you'd want to ban someone 
by IP address is beyond me since IP bans are pretty much useless.


 I have tried to ban people but the steam I'd doesn't stay in the 
file it disappears after use banid 0 steam_### then writeid. Didn't work


Don't use writeid after you ban someone. banid 0 steam_xyz is 
enough to remove the offending player from the server. You also need 
to make sure you have exec banned_user.cfg in your server.cfg or the 
ban list will be lost when the server crashes or is restarted.




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


[hlds] Someone took over server

2015-01-23 Thread Korrey Moore
 RCON is fine if used properly, like issuing IP bans for failed attempts
etc.

You don't need RCON to issue an IP ban. Why you'd want to ban someone by IP
address is beyond me since IP bans are pretty much useless.

 I have tried to ban people but the steam I'd doesn't stay in the file it
disappears after use banid 0 steam_### then writeid. Didn't work

Don't use writeid after you ban someone. banid 0 steam_xyz is enough to
remove the offending player from the server. You also need to make sure you
have exec banned_user.cfg in your server.cfg or the ban list will be lost
when the server crashes or is restarted.
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Korrey Moore
 You should use SMAC's RCON Locker and whitelist IP that you want to allow.

 http://smac.sx/

Whitelisting home connections is rather pointless since the majority have
dynamic IP addresses that constantly change. Then there's the problem that
IP addresses can be easily spoofed.

 It's a TCP block, dunno why he said HTTP explicitly because it isn't HTTP.

Yeah excuse me on that, I work with all sorts of routers that use HTTP and
TCP interchangeably in the firmware and wasn't thinking.
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread 2xcombatvet
Ok so I am using SMAC and added my IP to the whitelist. Not sure if its working 
but we will see. Thanks everyone


Sent from my T-Mobile 4G LTE Device


 Original message 
From: Kit Parenteau kitfo...@gmail.com 
Date:01/23/2015  08:54  (GMT-05:00) 
To: hlds@list.valvesoftware.com 
Cc:  
Subject: Re: [hlds] Someone took over server 

 Whitelisting home connections is rather pointless since the majority 
 have dynamic IP addresses that constantly change. Then there's the 
 problem that IP addresses can be easily spoofed.

The inbound packets can be source-spoofed, but full TCP links and return 
UDP will not reach the spoofer unless ARP poisoning or something similar 
enough is used. In cases of UDP being listened to without caring whether 
the reply gets to where it's supposed to go, spoofing will work. TCP? 
Not so much unless you can get into the network between the source and 
the destination and even then it's a pain. Home IP addresses changing is 
a challenge though.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


Re: [hlds] Someone took over server

2015-01-23 Thread Nomaan Ahmad
OP mentioned about allowing gameme's rcon connection, so this plugin will
help him.
TCP can be spoofed? I thought that was true for UDP.

I have had similar server hijackings in the past, this plugin helped.
Blocking off rcon by using rcon_password  or disabling TCP altogether
might have same effects but you cant use sourcebans or gameme/hlstatsx
after that.

On 23 January 2015 at 08:23, Korrey Moore ajac...@gmail.com wrote:

  You should use SMAC's RCON Locker and whitelist IP that you want to
 allow.
 
  http://smac.sx/

 Whitelisting home connections is rather pointless since the majority have
 dynamic IP addresses that constantly change. Then there's the problem that
 IP addresses can be easily spoofed.

  It's a TCP block, dunno why he said HTTP explicitly because it isn't
 HTTP.

 Yeah excuse me on that, I work with all sorts of routers that use HTTP and
 TCP interchangeably in the firmware and wasn't thinking.

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
https://list.valvesoftware.com/cgi-bin/mailman/listinfo/hlds