Jump to content

cod2 server hacked!


sizif

Recommended Posts

Ok,

I have few cod4 servers and I added custom command line for servers that goes +set rcon_password so that password user overrides pass in config so it couldn't get hacked.

 

I try to do same thing on cod2 but after this command server doesn't respond so I need to use default rcon in config and server keeps gettin hacked.

What am I doing wrong? Please help

Link to comment
Share on other sites

Command line is +set rcon_password (if we are thinking on the same thing). Now I only dissallowed downloading from config as the server beeing stock but in the future someone will buy server who will put some mod on and then it will be problem

Link to comment
Share on other sites

Ok,

I have few cod4 servers and I added custom command line for servers that goes +set rcon_password so that password user overrides pass in config so it couldn't get hacked.

 

I try to do same thing on cod2 but after this command server doesn't respond so I need to use default rcon in config and server keeps gettin hacked.

What am I doing wrong? Please help

 

 

if your server config file is server.cfg change it for another name like cod2server.cfg or whatever.

Link to comment
Share on other sites

Disabling the download option is the only true solution.

 

Everything else is somewhat of a "please-god-let-this-work" situation.

 

So, if your download option is set to 1...

 

Renaming configs is nice, but all it takes to ruin everything for you is just one ***hole user, as he will spread the "news" about those new config filenames to his "gangsta" buddies :)

 

If you let your clients choose their own +exec config option through command line, all it takes to find that filename and the rcon is an ***hole with some brains.

 

If you let them choose their own rcon through command line, all it takes is (again) an ***hole with some brains. He will get "his" rcons on most of the servers.

 

But...creating a simple "+rcon_password" option in your command line is still the best solution (imho)

Link to comment
Share on other sites

Ihave disabled download but there is one thing that i don't get. If I have custom maps and mod, isn't it -allow download- option that enabled redirect for fast download?

 

My command line is:

 

+set fs_savepath C:\UserFiles\sizif\GameServers\TC32350513788161757235083\ +set dedicated 2 +set net_ip xx.xx.xxx.xx +set net_port xxxxx +set sv_maxclients 16 +set sv_punkbuster 1 +exec server.cfg +map_rotate

 

and one with +set rcon_command that crashes server is:

 

+set fs_savepath C:\UserFiles\sizif\GameServers\TC32350513788161757235083\ +set dedicated 2 +set net_ip xx.xx.xxx.xx +set net_port xxxxx +set sv_maxclients 16 +map_rotate +exec server.cfg +set rcon_password "something"

 

I see on Youtube that some guy hacks servers on some tool called "Mahack" and in this video he doesn't download server.cfg, he only enters servers IP and that is it.

Maybe that program does this but it is not seen on video. That software in a few seconds tells him rcon pass. I supose that it gets pass from server.cfg so I strictly need custom command line so that I can save password in servers memory. It works on cod4. Doesn't cod2 and cod4 have same basic command lines?

Link to comment
Share on other sites

sv_allowdownload 1 - enables download from the server

sv_wwwDownload 1 - enables redirecting (download from a web address provided in the sv_wwwBaseURL option)

 

Redirecting is always a smart thing to do

 

As for your command line...put the map rotate command at the end of your line...

 

Also, you don't need that fs_savepath thingie ;)

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Terms of Use