server.cfg rates, security required?

[ColoDedi]

Good Evening All,

I am the owner of GSP and have nearly finished building our bespoke game control panel which lets our clients instantly start, stop and restart their game service aswell as changing which game is run and installing mods at the click of a button.

I do have a question about the security / ownership of the server.cfg file.

All the rates are set in the server.cfg file but if i was to provide my clients with access to this file they would be able to change the rates and then restart their service possibly affecting the performance of clients sharing that same physical server.

Do you have any advice or recomendations on what to do in this situation?

Kind Regards
Greg Langford

[css]

CVAR rates are pretty much meaningless. If you run your servers on tickrate 33 or 66, then the maximum rate should be set to the same value in the config. Even if somebody writes very high rate values to the config, the maximum rate will be limited automatically to the tickrate. That's why it doesn't actually matter what's in the config. The "worst" someone can do is lower the rates from the optimal.

[ColoDedi]

That is good news to me it saves me alot of hassle running a script every 5 minutes that checks everyones rates and then changing them back if they are different then restarting the server.

Would you suggest not to set the rates if the tickrate attribute is set then?

Cheers for the help

[m0-]

That is why you need to send arguments when running the server

Arguments that have a +, clients can change (think of it as public)
Arguments that have a -, clients cannot change (think of it as private)

So when you run steam. -players 12 -maxticrate 2320323203203 (whatever)

[css]

I didn't know that + and - thing. It's good if it's like that.

My suggestion is that in your default config you have pro level rate settings. That way stupid players will think that they just got a bad ass whopping server. Then those who know that the tickrate is all that matters are glad to know that you've set settings to the maximum.

[DataMatrix]

m0- Wrote:That is why you need to send arguments when running the server

Arguments that have a +, clients can change (think of it as public)
Arguments that have a -, clients cannot change (think of it as private)

So when you run steam. -players 12 -maxticrate 2320323203203 (whatever)

This is crap. Ignore this post.

- is basically a COMMAND to the server's executable to change a value in the way srcds operates.
+ is a cvar change.

E.g. you couldn't do +players 12 but you could do +maxplayers 12
or you couldn't do -sv_alltalk 1 but you could do +sv_alltalk 1