SRCDS Hardening - Revision history

Mavrick4283: /* Windows Server Firewall and Hardening */

2012-07-08T07:55:30Z

‎Windows Server Firewall and Hardening

2012-07-06T19:09:36Z

‎Securing your server

2011-10-29T15:11:04Z

‎Clientside plugins

2011-08-30T20:38:22Z

‎Securing your server

2011-08-14T11:59:41Z

Link to a non broken password generator.

2011-07-31T10:48:39Z

‎Linux File Premission Setup

2011-07-29T20:44:05Z

‎Linux File Premission Setup

2011-07-21T19:58:04Z

‎Linux File Premission Setup

2011-07-21T19:57:07Z

‎Linux Setup

2011-07-21T19:55:55Z

‎File Permissions

@@ Line 17: / Line 17: @@
 == Windows Server Firewall and Hardening ==
-https://forums.alliedmods.net/showthread.php?t=119214
+https://forums.alliedmods.net/showthread.php?t=189327
 == Linux General Hardening ==

@@ Line 15: / Line 15: @@
 * logs/
 Note that some plugins rely on being able to write to directories other then these, and permissions may break them.  At the very least, it's a good idea to make sure srcds is running as a user that does not have permission to change anything outside of it's own directory.  That will prevent your machine from being comprised and made into a botnet client.
 == Linux General Hardening ==

@@ Line 155: / Line 155: @@
 *Fix: [https://forums.alliedmods.net/showthread.php?p=841590 Rcon locker / exploit fix] has a partial fix for this.
 === Empty name / unconnected ===
 Players can set their name to an empty string using the setinfo console command.  Some admin plugins will be unable to kick or perform other actions on them.  Valve has been notified, and is unwilling to fix this.

@@ Line 15: / Line 15: @@
 * logs/
 Note that some plugins rely on being able to write to directories other then these, and permissions may break them.  At the very least, it's a good idea to make sure srcds is running as a user that does not have permission to change anything outside of it's own directory.  That will prevent your machine from being comprised and made into a botnet client.
 == Linux File Permission Setup ==

@@ Line 2: / Line 2: @@
 == General Tips ==
 * Do not enable sv_cheats, do not run any plugins that do so.
-* [http://www.goodpassword.com/ Use secure passwords.]  This should be obvious, but your clan name is not a good rcon password, nor is "password".
+* [http://www.pctools.com/guides/password/ Use secure passwords.]  This should be obvious, but your clan name is not a good rcon password, nor is "password".
 * Don't blindly give admin out.  Depending on what flags you give people, you could allow them to take over the server.
 * Don't piss people off.  Many servers get attacked because players get pissed off that admins are abusing them.

@@ Line 16: / Line 16: @@
 Note that some plugins rely on being able to write to directories other then these, and permissions may break them.  At the very least, it's a good idea to make sure srcds is running as a user that does not have permission to change anything outside of it's own directory.  That will prevent your machine from being comprised and made into a botnet client.
-== Linux File Premission Setup ==
+== Linux File Permission Setup ==
 Create a unprivileged users to run the server.

@@ Line 29: / Line 29: @@
 Set a password for the account make sure it is secure.
-'''passwd gmod'''
+'''passwd srcds'''
 * passwd srcds = Linux change password command