next »

[MordyT]

As we all know, it is a good idea to set your rcon password in the command line so it cannot be found by downloading your server.cfg

Can anyone confirm this is the correct syntax for a command line..

+set rcon_password "asdf"

More specific, I am looking to make sure it should not be +set rcon_password asdf , that the qoutes are needed.

[Miramar]

why just dont you try it both ways? by trial and error... 

afaik it works with AND without the quotes... but usually they are NOT needed...

[MordyT]

why just dont you try it both ways? by trial and error... 

afaik it works with AND without the quotes... but usually they are NOT needed...

I don't have access to the comand line changer so I need to tell my host what to put into there.

Thanks for the info, I am using the qoutes and it seems to work fine.

[IceOps|Ninja]

As we all know, it is a good idea to set your rcon password in the command line so it cannot be found by downloading your server.cfg

Can anyone confirm this is the correct syntax for a command line..

+set rcon_password "asdf"

When you put that at the end of the commandline I know where I will very likely find your password...

[MordyT]

When you put that at the end of the commandline I know where I will very likely find your password...

Um, where? Not in the server info - I checked. It is not at the end of the command line either, it is right after the +set dedicated 2.

If it isn't secure there either, where would you put it?
Also, can you check and see if you get the password? IP: 85.234.138.162:2305

[IceOps|Ninja]

Um, where? Not in the server info - I checked. It is not at the end of the command line either, it is right after the +set dedicated 2.

If you do it wrongfully it can be downloaded with the console_mp.log file. <- works usually on almost every 2nd server.
So you do it wise when you set the rconpassword before logging gets activated <- happens in server.cfg usually.
so the set rcon_password commandline option have to be before an exec server.cfg

I have no longer such issues anyway. The possibility to download any file from server is a huge security exploit (directory traverse). So you can from Windows-Servers for example download the backup-registry and so on.

[Miramar]

If you do it wrongfully it can be downloaded with the console_mp.log file. <- works usually on almost every 2nd server.

i have disabled the logging of the console_mp.log...
i have only the games_mp.log for b3

but i never had any problems like someone was downloading my cfg or any logfile or something (thank god ^^)... so i cant discuss with you guys about this topic...