[Pitbull3]

There are ways for people to download your server.cfg file and just look at your RCON then use it....

You can circumvent all rcon access by deleting the rcon_password from your server.cfg and place the rcon in your command / startup line easily by doing this: +rcon_password blahblahblah

That's what I did after someone "hacked" one of my servers... pretty simple and fixes that problem forever...