IP Ban spamming the logs and console

[joe_sandwich]

Server OS: Windows Server 2008 R2 standard edition 64-bit
Processor: I don't know the exact model number, but there are two physical xeon processors. Each processor has 2 cores running at 3.00ghz.
Ram: 3gb
Game(s): TF2. Another TF2 and CSS server are running on the same box and may have the same issue, but I'm not sure.
Start Up Command:

Code:

@echo off
cls
echo Protecting srcds from crashes...
echo If you want to close srcds and this script, close the srcds window and type Y depending on your language followed by Enter.
title srcds.com Watchdog
:srcds
echo (%time%) srcds started.
cd C:\GameInstalls\TF2\orangebox
start /wait srcds.exe -console -game tf -ip 208.94.242.52 -port 27015 +map ctf_2fort +maxplayers 24
echo (%time%) WARNING: srcds closed or crashed, restarting.
goto srcds

Admin Mods: Sourcebans, Sourcemod and Metamod.

Bandwidth: 100mbit port
Router: Whatever the data center has...
Local IP of Server: Frankly, I have no clue. A buddy of mine set up the IPs for me since I have no experience with subnetting. The External IP for remote connection is 208.94.242.50
External IP: The server in question has the IP 208.94.242.52 and is running using the standard srcds ports. Two other source servers run on the IPs 208.94.242.51 and 208.94.242.53
Port Forwarding Screen Shot: [server] -> [data-center]


Lately this European IP has been sending some RCON requests to my server that are less than appreciated. This is the message that appears at least 2000 times in my logs and console:

Code:

09/07/2011 - 00:23:43: Addip: "<><><>" was banned by IP "for 1337.00 minutes" by "Console" (IP "85.214.232.59")

I don't believe that this should be standard for an IP ban to display this message each time a user is blocked. That is why I'm worried that my server might not be banning the person correctly.

Here is the config file, if it is of any interest:

Code:

// General Settings //

// Hostname for server.
hostname {G4C} RTD www.gamingforchrist.com

// Overrides the max players reported to prospective clients
sv_visiblemaxplayers 24

// Maximum number of rounds to play before server changes maps
mp_maxrounds 8

// Set to lock per-frame time elapse
host_framerate 0

// Set the pause state of the server
setpause 0

// Control where the client gets content from
// 0 = anywhere, 1 = anywhere listed in white list, 2 = steam official content only
sv_pure 0

// Is the server pausable
sv_pausable 0

// Type of server 0=internet 1=lan
sv_lan 0

// Whether the server enforces file consistency for critical files
sv_consistency 1

// Collect CPU usage stats
sv_stats 1



// Execute Banned Users //
exec banned_user.cfg
exec banned_ip.cfg
writeid
writeip
// filterban 1


// Contact & Region //

// Contact email for server sysop
sv_contact me@jasonbray.us

// The region of the world to report this server in.
// -1 is the world, 0 is USA east coast, 1 is USA west coast
// 2 south america, 3 europe, 4 asia, 5 australia, 6 middle east, 7 africa
sv_region 0



// Rcon Settings //

// Password for rcon authentication
rcon_password [color=#800000][b]DERP[/b] [/color]

// Number of minutes to ban users who fail rcon authentication
sv_rcon_banpenalty 1337

// Max number of times a user can fail rcon authentication before being banned
sv_rcon_maxfailures 5



// Log Settings //

// Enables logging to file, console, and udp < on | off >.
log on

// Log server information to only one file.
sv_log_onefile 0

// Log server information in the log file.
sv_logfile 1

// Log server bans in the server logs.
sv_logbans 1

// Echo log information to the console.
sv_logecho 1



// Rate Settings //

// Frame rate limiter
fps_max 600

// Min bandwidth rate allowed on server, 0 == unlimited
sv_minrate 0

// Max bandwidth rate allowed on server, 0 == unlimited
sv_maxrate 20000

// Minimum updates per second that the server will allow
sv_minupdaterate 10

// Maximum updates per second that the server will allow
sv_maxupdaterate 66



// Download Settings //

sv_downloadurl "http://gamersinchristjesus.com/tf2/"
// FASTORZ DWNLOADZ

// Allow clients to upload customizations files
sv_allowupload 1

// Allow clients to download files
sv_allowdownload 1

// Maximum allowed file size for uploading in MB
net_maxfilesize 15



// Team Balancing //

// Enable team balancing
mp_autoteambalance 1

// Time after the teams become unbalanced to attempt to switch players.
mp_autoteambalance_delay 60

// Time after the teams become unbalanced to print a balance warning
mp_autoteambalance_warning_delay 30

// Teams are unbalanced when one team has this many more players than the other team. (0 disables check)
mp_teams_unbalance_limit 1



// Round and Game Times //

// Enable timers to wait between rounds. WARNING: Setting this to 0 has been known to cause a bug with setup times lasting 5:20 (5 minutes 20 seconds) on some servers!
mp_enableroundwaittime 1

// Time after round win until round restarts
mp_bonusroundtime 8

// If non-zero, the current round will restart in the specified number of seconds
mp_restartround 0

//Enable sudden death
mp_stalemate_enable 1

// Timelimit (in seconds) of the stalemate round.
mp_stalemate_timelimit 300

// game time per map in minutes
mp_timelimit 35



// Client CVARS //

// Restricts spectator modes for dead players
mp_forcecamera 0

// toggles whether the server allows spectator mode or not
mp_allowspectators 1

// toggles footstep sounds
mp_footsteps 1

// toggles game cheats
sv_cheats 0

// After this many seconds without a message from a client, the client is dropped
sv_timeout 900

// Maximum time a player is allowed to be idle (in minutes), made this and sv_timeout equal same time?
mp_idlemaxtime 15

// Deals with idle players 1=send to spectator 2=kick
mp_idledealmethod 2

// time (seconds) between decal sprays
decalfrequency 15



// Communications //

// enable voice communications
sv_voiceenable 1

// Players can hear all other players, no team restrictions 0=off 1=on
sv_alltalk 1

// amount of time players can chat after the game is over
mp_chattime 10

// enable party mode
// tf_birthday 1

I would appreciate any suggestions on how to correctly ban that IP and prevent any further spamming of my logs (I know I can change my IP address but I would rather not sidestep the problem)

[Cyba_Mephisto]

http://wiki.alliedmods.net/SRCDS_Hardening#Invalid_RCON_Crash

There are many many more way easier and more effective solutions on linux. Im sorry that I dont know any for windows servers. Maybe someone else can tell you how to limit the max attempts on that port.
I'm also sensing that there was a cvar for this, but I don't know how it
s called.

[joe_sandwich]

Thanks for your response Cyba

I fixed the issue by blocking that IP through windows firewall, however I later had to remove it when I realized that is the GameME stats website's IP. I accidentally put the wrong RCON address in the gameME control panel xD