Raised This Month: $ Target: $400
 0% 

Rcon hack attempt banning - What is causing it?


  
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
Author Message
Gamemaster1379
Junior Member
Join Date: Jun 2010
Old 09-08-2012 , 23:54   Rcon hack attempt banning - What is causing it?
Reply With Quote #1

Hello all, I am at my wit's end and am hoping you can help me come to a solution about a problem I'm having.

Over the past few days, a server I manage has been acting erratically and has been banning several people, including myself (the server admin), for what appears to be no reason whatsoever. From what I can gather from console logs, the only thing out of the ordinary is the server banning IP addresses for "rcon hacking attempts"--which I assume is getting the wrong password several times consecutively. However, the bans are happening when players are connecting and when others are simply starting TF2 (some can view game info out of game, but the moment they launch TF2 and don't connect but are still viewing game info, they get a null response because they are IP banned).

I have checked for IP addresses written to the cfg/banned_ip.cfg (and IDs under banned_users.cfg) and have found them to be blank every time, so it is not pulling these from a config and is instead actively banning upon supposed rcon attempts.

The only way I can currently connect to the server is have a fellow admin execute removeip via sm_rcon and remove my IP. If that is done (and my TF2 client is already started), then I can join no problem and it will not kick me at any time during the game, during map changes, or similar. However, if my client crashes or I quit to reconnect, I am banned again on game start. Likewise for any others who are being IP banned for rcon hack attempts.

While this may not seem SM related, the only common factor I can gather from all of those who are being banned is that they are listed in the admin.cfg file as either admins, moderators, or reserve slot holders. I believe it has something to do with Sourcemod admin validation, but I am not for certain.

I would greatly appreciate any help on the matter as I am at a total loss.
Gamemaster1379 is offline
 



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 20:55.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode