Block rcon* cmds sent to client by server

ValveSoftware / halflife

Half-Life 1 engine based games

Other

3.66k stars 616 forks source link

Block rcon* cmds sent to client by server #1492

Open kncsvk opened 10 years ago

kncsvk commented 10 years ago

I have problem that when I play on some servers they use me as bruteforce tool for hacking another goldsrc based servers rcon by setting rcon_password, rcon_address, rcon_port and rcon command on my client.

This should be fixed same way as is blocked 'bind' cmd from server. :)

SamVanheer commented 5 years ago

@mikela-valve This looks like an open and shut case. The client should never receive rcon commands since the server is the one that should be receiving them.