|
Author
|
Message
|
|
Junior Member
|

09-08-2012
, 23:54
Rcon hack attempt banning - What is causing it?
|
#1
|
Hello all, I am at my wit's end and am hoping you can help me come to a solution about a problem I'm having.
Over the past few days, a server I manage has been acting erratically and has been banning several people, including myself (the server admin), for what appears to be no reason whatsoever. From what I can gather from console logs, the only thing out of the ordinary is the server banning IP addresses for "rcon hacking attempts"--which I assume is getting the wrong password several times consecutively. However, the bans are happening when players are connecting and when others are simply starting TF2 (some can view game info out of game, but the moment they launch TF2 and don't connect but are still viewing game info, they get a null response because they are IP banned).
I have checked for IP addresses written to the cfg/banned_ip.cfg (and IDs under banned_users.cfg) and have found them to be blank every time, so it is not pulling these from a config and is instead actively banning upon supposed rcon attempts.
The only way I can currently connect to the server is have a fellow admin execute removeip via sm_rcon and remove my IP. If that is done (and my TF2 client is already started), then I can join no problem and it will not kick me at any time during the game, during map changes, or similar. However, if my client crashes or I quit to reconnect, I am banned again on game start. Likewise for any others who are being IP banned for rcon hack attempts.
While this may not seem SM related, the only common factor I can gather from all of those who are being banned is that they are listed in the admin.cfg file as either admins, moderators, or reserve slot holders. I believe it has something to do with Sourcemod admin validation, but I am not for certain.
I would greatly appreciate any help on the matter as I am at a total loss.
|
|
|
|