CSS server hacked - won't start up.

[Retality]

Well, we repeatedly get hacked, and I have a shit-ton of protection, but it seems like we get targeted by the big guys. We now can't start one server - it starts, then about about 0.5 second, it just closes, and the watchdog keeps trying to restart it, causing the dedicated server to slow in performance for massive start spam. How do I fix this? We only have Sourcemod and eventscripts - both exploitable, but I can't find anything that would cause our server to do this.

L 03/11/2010 - 19:53:17: rcon from "70.119.47.190:55781": command "hi"
L 03/11/2010 - 19:53:19: Log file closed

EVEN WITH rcon_password ""

[Retality]

Fixed it. Replaced an infected gameinfo.txt in /cstrike/ with another server's one.

[Edge100x]

If you're not running the plugins mentioned here, I'd also recommend adding them: http://wiki.alliedmods.net/SRCDS_Hardening

[rustydusty1717]

What has been going on lately with CS and CS:S Servers getting hacked? I've heard of a good dozen now. Did Valve forget to make their servers secure this past month?

[Edge100x]

The known exploits for CS:S are just piling up. Valve is working on fixes for them as part of a larger update, and is choosing not to release them piecemeal.

For CS 1.6, there was a DoS exploit available briefly that could crash servers, but it was resolved by Valve with a new release.

[rustydusty1717]

The known exploits for CS:S are just piling up. Valve is working on fixes for them as part of a larger update, and is choosing not to release them piecemeal.

For CS 1.6, there was a DoS exploit available briefly that could crash servers, but it was resolved by Valve with a new release.

Well since I only run CS servers, horray. For all the CS:S server admins, I feel bad for you. Hopefully Valve fixes the issues soon!