Source RCON

You can use Source RCON protocol to help moderate your server. You can configure and setup RCON with the following steps.

WARNING

The server must be stopped while editing server files. You must save your edits and restart your server for any edits to take effect.

DANGER

If you are using RCON on your server, please review the Security Enhancements section to ensure your server is secure.

Enabling RCON

1. Inside the WindowsServer folder, edit the Game.ini file. You can find this file in the following location:

• PathOfTitans
• Saved
• Config
• WindowsServer
• Game.ini

INFO

WindowsServer is the folder name for Windows servers. If you are using a different operating system, the folder name will be different but the other folders will be the same.

2. Underneath the [SourceRCON] header, create the entries specified in the below example.

Example Game.ini

[SourceRCON]
bEnabled=true
bLogging=false
Password="password"
Port=0
IP="0.0.0.0"
MaxFailedAttempts=5
Timeout=60
PageTimeout=5
MaxConnectionsPerIP=3
IPAllowList=192.168.1.1

Configuration Options

bEnabled - Enables or disables the RCON server. Default is false.

bLogging - Enables or disables logging of RCON commands. Default is false.

Password - The password required to connect to the RCON server. Must be at least 8 characters long. Check Minimum Password Length for more information.

Port - The port the RCON server will listen on. By default, it will use the game server port + 2.

IP - The IP address the RCON server will bind to. By default, it will bind to all local addresses.

MaxFailedAttempts - The number of failed login attempts before the IP is banned. Default is 5.

Timeout - The number of seconds before the RCON server closes automatically. Default is 60.

PageTimeout - The number of seconds before paged responses are removed. Default is 5.

MaxConnectionsPerIP - The number of connections allowed per IP. Default is 3.

IPAllowList - A list of IP addresses that are allowed to connect to the RCON server. If this is not present, all IP addresses are allowed.

Security Enhancements

In order to secure your server, we recommend the following security practices:

• Use a secure password with letters, numbers, and symbols with the aim of 16 characters or more.
• Regularly change the password for the RCON server. For example, once a month.
• Avoid sharing the password unnecessarily, limit access to trusted individuals.
• Enable the IP Allow List to restrict access to trusted IPs.
• Monitor logs for unauthorized access attempts.

To assist with security, the following security enhancements can be used for your RCON configuration:

Minimum Password Length

RCON passwords must be at least 8 characters long. However, it is recommended to use a password of 16 characters or more, including a mix of uppercase and lowercase letters, numbers, and special symbols.

WARNING

RCON passwords must be at least 8 characters long for the RCON to be enabled, otherwise it will be disabled.

Some of the following characters are not allowed in the password:

" (double quote)
' (single quote)
` (backtick)
= (equals sign)
| (pipe)

RCON IP Allow List

Restrict RCON access to specific IP addresses by adding them to the allow list:

[SourceRCON]
IPAllowList=192.168.1.1
IPAllowList=192.168.1.2

TIP

You can add multiple IP addresses to the allow list by adding multiple IPAllowList entries. This feature is only enabled if the IPAllowList entry is present in the Game.ini file, otherwise all IP addresses are allowed.

This will only allow RCON connections from the specified IP addresses.

Further Security Measures

For users who would like to harden RCON to make it more secure, please set the following settings:

[SourceRCON]
MaxConnectionsPerIP=1
MaxLoginAttempts=1

This will limit the number of password guesses and attempt that can be made. Since RCON Bots won't guess incorrectly this will be more secure to outside connections.

TIP

If your community server is having issues with cheating please reach out to our support team. Please be ready to provide a Game.ini and PathOfTItans.log file so we can help you with your server if you are having issues.

Command Line Arguments

These Commands will override the equivalent RCON Game.ini commands. Use case is scenarios where the entity in control of the physical server is assigning specific RCON Ports and IPs to different server instances. This is to prevent the enduser manager of a server instance from overriding Ports and IPs in Game.ini in a datacenter server.

• -RconPort=0
• -RconIP=0.0.0.0

Config Information

• When IP is set to 0.0.0.0 will bind to all local addresses, if you want it to only bind to one adapter please insert that local address there instead.
• MaxFailedAttempts will ban the IP from RCON connections after this many failed attempts.
• MaxConnectionsPerIP will close oldest connections when new connections are made over this amount
• Timeout will cause the RCON server to close automatically after the amount of seconds without any packet sent
• A default port of 0 will auto determine the port which will be Game Server Port + 2.

7777 = Default Game Port
7778 = Default Game Port + 1 (Reserved)
7779 = Default Game Port + 2 (RCON Port)
7780 = Default Game Port + 3 (Stats Port)
7781 = Default Game Port + 4 (Query Port)

RCON Commands

Connecting to RCON

There are many RCON clients available, however, an example of connecting to RCON using mcrcon is provided below:

• We recommend installing an RCON Client, in this example we will use the mcrcon RCON found here: https://github.com/Tiiffi/mcrcon
• However you should be able to use any Source / Valve RCON compatible client. Some however might crash if they have implemented the protocol incorrectly.

INFO

mcrcon is a command line tool, you will need to run it via command prompt. By default it will output text and automatically close so clicking the executable won't work.

• Please replace 127.0.0.1 with your servers external IP address

./mcrcon -H 127.0.0.1 -P 7778 -p password

• After connecting you can run the help command to list what commands you can run.

Executable Commands

TIP

Commands do not need to be executed with a / or # unlike the previous rcon implementation.

Example:

• teleportall talonspoint will teleport all players to Talons Point.

The following link contains a list of all chat commands and if they are supported by RCON: Admin Commands.

Long Responses (Paged Responses) (Rev 27297+)

When responses exceed 4,000 characters, they are split into smaller pages for easier handling. Below is an explanation of how paged responses work and how to access them:

Page Structure

Each page includes a prefix with key and page information:

[Page(Key {KeyNum}) {PageIndex}/{MaxPages}]

An example of a page prefix is shown below:

[Page(Key 1) 1/5]

This indicates page 1 out of 5 pages for Key 1.

Accessing Paged Responses

1. Timeout for Pages: Pages are stored temporarily for the duration specified by the PageTimeout setting in your configuration.

2. Requesting Specific Pages: To retrieve a specific page, send a request using this format:

   Page:{KeyNum}-{PageIndex}

   Example:

   page:1-3

   This retrieves page 3 for Key 1.

Page Content

Each page contains only its segment of the full response, without overlap from other pages. When concatenated (excluding the prefix), the pages will reconstruct the original complete response seamlessly.

By following these guidelines, you can effectively handle and navigate long responses within the RCON system.