[FilterScript] SafeCon - Protect your RCON against unwanted access - SA-MP Forums

Mauzen · 14/05/2011, 08:53 AM

I made this filterscript today, as I noticed quite a lot of RCON attacks in the last time.
SafeCon will protect your server from unwanted RCON access. Hackers wont have a chance to get your rcon password, if you use it right.

SafeCon basically has one main feature so far: a frequently changing RCON password. It chooses a random password from your list once in a specified interval. Doesnt sound special, but it is very effective. Beside this, it offers a name- and IP-whitelist. Only people on one of these lists can login as RCON admin ingame.
For security reasons all those lists are compiled with the code. This means you have to recompile it everytime you want to change it, but this makes it a lot more safe. Incase someone can read your server directory (e.g. your hoster) he could read the RCON password from the server.cfg or any password list file, but this way he even cant do that. He would have to decompile the code (which is of course AntiDeAMX protected).

Setup
The setup is quite easy. Copy the pastebin code and paste it to an empty file. Just take a look at the top of the script, everything should be explained in the comments. And of course dont upload the pwn source to your server, just the compiled amx.
When you set all the defines and arrays the way you like, compile the code. Add the filterscript to your server.cfg or put this somewhere in your OnGameModeInit():

pawn Code:

SendRconCommand("loadfs SafeCon");   // or however you named the file

How to use
When using the hardcoded password list, use /rconpw ingame to get the index of the currently active password. Index 0 is the first password in the array. Anyone can use this command. Then check the password list for that index to see whats the current password.
So you should think at least twice who should get the password list. Only people you can trust 111% should get it, and tell them not to give it to anyone else (just like you should handle your normal RCON password). I recommend using a safe connection for sending the list, services like https://privnote.com/ should do fine.

The name/IP-whitelist can be used if you experience RCON hacks anyways. When using a safe register/login system the name-list will do it, otherwise use the ip-list (which has to be updated more often because of dynamic IPs of course)

What else
Thats it, your RCON password should now be 99,9% safe (without any warranty of course

)
If you got any suggestions, feel free to tell me.

Download: Pastebin

wheelman_WM · 14/05/2011, 08:55 AM

wow man it will really help many people thnx for it i m gonna use it

juraska · 14/05/2011, 08:55 AM

Nice job man

Markx · 14/05/2011, 09:03 AM

Very good!

[DR]Reaper[GEARS] · 14/05/2011, 09:05 AM

nice (:

xkirill · 14/05/2011, 09:39 AM

nice!!

Medal Of Honor team · 14/05/2011, 11:01 AM

really nice!

Naruto_Emilio · 14/05/2011, 11:18 AM

Epic Release

, Thanks Mauzen

14/05/2011, 11:32 AM

nice

••• ĤÁĶÁM ••• · 14/05/2011, 11:36 AM

Pretty much nice - but for the white list, I don't think it's recommended for anyone who has a dynamic IP address.

14/05/2011, 08:53 AM	#1
Mauzen High-roller Join Date: Jun 2007 Location: Western Germany Posts: 2,862 Reputation: 616	SafeCon - Protect your RCON against unwanted access I made this filterscript today, as I noticed quite a lot of RCON attacks in the last time. SafeCon will protect your server from unwanted RCON access. Hackers wont have a chance to get your rcon password, if you use it right. SafeCon basically has one main feature so far: a frequently changing RCON password. It chooses a random password from your list once in a specified interval. Doesnt sound special, but it is very effective. Beside this, it offers a name- and IP-whitelist. Only people on one of these lists can login as RCON admin ingame. For security reasons all those lists are compiled with the code. This means you have to recompile it everytime you want to change it, but this makes it a lot more safe. Incase someone can read your server directory (e.g. your hoster) he could read the RCON password from the server.cfg or any password list file, but this way he even cant do that. He would have to decompile the code (which is of course AntiDeAMX protected). Setup The setup is quite easy. Copy the pastebin code and paste it to an empty file. Just take a look at the top of the script, everything should be explained in the comments. And of course dont upload the pwn source to your server, just the compiled amx. When you set all the defines and arrays the way you like, compile the code. Add the filterscript to your server.cfg or put this somewhere in your OnGameModeInit(): pawn Code: SendRconCommand("loadfs SafeCon"); // or however you named the file How to use When using the hardcoded password list, use /rconpw ingame to get the index of the currently active password. Index 0 is the first password in the array. Anyone can use this command. Then check the password list for that index to see whats the current password. So you should think at least twice who should get the password list. Only people you can trust 111% should get it, and tell them not to give it to anyone else (just like you should handle your normal RCON password). I recommend using a safe connection for sending the list, services like https://privnote.com/ should do fine. The name/IP-whitelist can be used if you experience RCON hacks anyways. When using a safe register/login system the name-list will do it, otherwise use the ip-list (which has to be updated more often because of dynamic IPs of course) What else Thats it, your RCON password should now be 99,9% safe (without any warranty of course ) If you got any suggestions, feel free to tell me. Download: Pastebin __________________ Sapere aude Follow me building a robotic arm at home Legalize it! Projects: SutD, PAWN API Generator for Notepad++, RNPC plugin, Hosted servers for free Code: Filterscripts: Includes: EXP I: Bomber 0.97 MWeather: Alpha EXP II: Artillery 0.95 Explosive Inc: Version 1.0 SafeCon FS: Version 0.9 MapDialog inc: Version 0.1 Last edited by Mauzen; 14/05/2011 at 09:52 AM.

14/05/2011, 08:55 AM	#2
wheelman_WM Banned Join Date: Jan 2011 Location: Sun Posts: 405 Reputation: 1	Re: SafeCon - Protect your RCON against unwanted access wow man it will really help many people thnx for it i m gonna use it

14/05/2011, 08:55 AM	#3
juraska Huge Clucker Join Date: Apr 2011 Posts: 380 Reputation: 11	Re: SafeCon - Protect your RCON against unwanted access Nice job man

14/05/2011, 09:03 AM	#4
Markx Gangsta Join Date: Dec 2010 Location: Zagreb, Croatia Posts: 990 Reputation: 39	Re: SafeCon - Protect your RCON against unwanted access Very good! __________________ ...Left samp for now, hope i gonna be back someday...

14/05/2011, 09:05 AM	#5
[DR]Reaper[GEARS] Big Clucker Join Date: Feb 2011 Posts: 77 Reputation: 0	AW: SafeCon - Protect your RCON against unwanted access nice (: __________________

14/05/2011, 09:39 AM	#6
xkirill Banned Join Date: May 2011 Location: Internet Posts: 2,127 Reputation: 205	Re: SafeCon - Protect your RCON against unwanted access nice!!

14/05/2011, 11:01 AM	#7
Medal Of Honor team Banned Join Date: Feb 2011 Location: Osama Bin Laden's house ;) Posts: 552 Reputation: 1	Re: SafeCon - Protect your RCON against unwanted access really nice!

14/05/2011, 11:18 AM	#8
Naruto_Emilio High-roller Join Date: Apr 2011 Location: I really don't know Posts: 1,411 Reputation: 166	Re: SafeCon - Protect your RCON against unwanted access Epic Release , Thanks Mauzen

14/05/2011, 11:32 AM	#9
[S]trong Guest Posts: n/a	Re: SafeCon - Protect your RCON against unwanted access nice

14/05/2011, 11:36 AM	#10
••• ĤÁĶÁM ••• Huge Clucker Join Date: Aug 2010 Location: C:/windows/system32/hakam.dll Posts: 280 Reputation: 0	Re: SafeCon - Protect your RCON against unwanted access Pretty much nice - but for the white list, I don't think it's recommended for anyone who has a dynamic IP address. __________________ I don't care.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[FilterScript] [FS] RCON-manager (control your server easier from RCON-console)	Correlli	Filterscripts	33	07/04/2013 09:28 PM
I get unwanted error! :(	nuriel8833	Help Archive	4	24/04/2011 08:23 AM
Cannot access rcon with 0.3b	FoxtrotZulu	Server Support	1	13/08/2010 08:50 PM
[HR/SR:FS] RCON-manager (kontrolirajte svoj server još lakše sa RCON-konzolom)	Correlli	Archive	12	03/12/2009 03:15 PM
Unwanted Message Showing	sidhu123	Help Archive	20	23/03/2009 11:11 PM