<|SoMD|> Clan - Watch Out! Options

[NecroKitty]

Hey guys,


Last night our server #1 (the modded server) was attacked by members of the SoMD clan. They got ahold of the rcon password and ran roughshod on our server for hours as we couldn't kick/ban them fast enough. Eventually we had to crash the server and change all of the passwords again. They did the same thing to the BaH server earlier in the week. We are working with members of BaH to get other security measures in place so this doesn't happen again.

Just a heads up, if you ever see anyone with an <|SoMD|> tag I would kick/ban them immediately. I can understand not wanting to do this solely on my word, so just watch them carefully. One of them came on as ~IW~ Blackbart. But we had talked to Blackbart on the IW TS earlier and knew it wasn't him.

We have contacted their ISP (who, ironically, is our ISP for the #2 server), and provided them the logs. This is the second time they have hacked our server and gave info to VSK and if VSK doesn't fix it we will drop our service from them. We are also providing all of this to the OGL as they have their team on the Classic OGL ladder.

Anyway, just wanted to let you guys know.


=LMAO= NecroKitty

[Druid]

Although it possible for someone to find the rcon password 99.9% of the time they get it by one of these two ways.
1) smurfing as a clan members. Then they simply asks a real clan member for the rcon password.
2) Another common way people get the rcon password is someone mistakenly types it into chat and not the console.

The best way to keep the rcon private is
1) Never tell anyone the password, if another *clan-member* needs it. Never give it out in MOHAA, if someone needs it email it to them. This is the only way you can be sure who your giving it to.
2) Never type the rcon password in mohaa, sooner or later you'll type it into chat by mistake. The best way to take care of this problem is use a script.
Make a file in the MOHAA/main directory and call it rcon.cfg
Inside the file you'll have this
rconpassword yourpassword
rconaddress your server IP address
Then when you need rcon access open the console and type
exec rcon.cfg
If you do it this way you'll never accidentally typing your rcon password in chat and give it to everyone playing on your server.


If you use my suggestion of rcon.cfg
You can even go one step further and bind it to a key.
Open console and type bind f8 exec rcon.cfg
Then all you have to do is hit f8 and you'll have rcon access.
You can bind the script to whatever key you want.