This module will protect your server from general rcon exploits and crashes. It will lock your rcon password after your server has started to prevent it from being changed unintentionally.

This module can also utilize an additional third-party extension known as SM RCon (see thread here: https://forums.alliedmods.net/showthread.php?t=168403) to log IP information of rcon usage attempts and enables the rcon whitelisting feature in this plugin. This extension is only required for IP Logging and RCon whitelisting.

Commands

• smac_rcon_addip <ip> - Adds an IP address to the rcon whitelist. (requires SM RCon)
• smac_rcon_removeip <ip> - Removes an IP address from the rcon whitelist. (requires SM RCon)

Detection Sample (Log)

Rcon password changed to "LETMEIN". Reverting back to original config value.

SM RCon Support

NOTE: As of 8/20/2019, the SM RCon extension itself does not seem to be working with SM 1.10 and will cause issues when running rcon commands on the server! Removing the extension will disable the whitelisting/logging features, but it will fix the crashes. See this issue here for details: https://github.com/Silenci0/SMAC/issues/9

You can also install the SM RCon extension to make use of the IP whitelist feature. The whitelist is activated when the first IP is added to the list. All connections made from outside this list will be rejected, even if they provide the correct password. In the 0.8.6.2 update, additional logging utilizing SM RCon was added to the SMAC logs that (hopefully) records additional information about the attack/change attempt.

Forum Discussion

To be added at a later date.