How to Use RCON on Your CSS Server
Set up and use RCON to manage your CSS server remotely — from the game client, external tools, or SourceMod.
RCON in Counter-Strike: Source
RCON (Remote Console) lets you run server commands from outside the server process — from a game client, a third-party tool, or a script. CSS uses the Source RCON protocol over TCP, which is an improvement over CS 1.6's UDP-based RCON but is still unencrypted plaintext.
Setting the RCON Password
In cstrike/cfg/server.cfg:
rcon_password "YourStrongPassword"
To disable RCON entirely, set it to blank:
rcon_password ""
A blank password does not mean "no authentication required" — it means RCON is completely disabled. No one can connect via RCON, including you.
Using RCON from the CSS Client
Connect to your server in-game, then open your console:
rcon_password "YourStrongPassword"
rcon status
rcon sm_map de_dust2
rcon exec server.cfg
After setting rcon_password, every rcon <command> you type is sent to the server and the response appears in your client console. You don't need to be an in-game admin — RCON bypasses SourceMod's flag system entirely.
External RCON Tools
Any tool that speaks the Source RCON protocol works. Popular options:
- HLSW (Windows) — the classic Source server management tool
- SourceAdmin — browser-based, no install
- mcrcon / node-rcon — command-line tools for scripting
Connect using your server's IP, port 27015 (or whichever port you're on), and your rcon_password.
Common RCON Commands
rcon status # list connected players, their Steam IDs and pings
rcon sm_map de_dust2 # change map
rcon sm_kick "PlayerName" # kick a player
rcon sm_ban "#45" 60 "Cheating" # ban user #45 for 60 minutes
rcon exec server.cfg # re-execute your server config
rcon say "Server restarting in 5 minutes"
rcon sv_cheats 1 # toggle cheats
Launching with -usercon
The -usercon launch flag enables both RCON and local console input on the same running server. Without it, RCON may be unresponsive on some Linux setups. Always include it:
./srcds_run -game cstrike -console -usercon +map de_dust2 -port 27015
Security Considerations
Source RCON sends your password and all commands as plaintext over TCP. Someone packet-sniffing your network traffic can intercept RCON sessions.
Practical mitigations:
- Use a strong, unique password (not your panel password)
- Restrict RCON access at the firewall level — only allow TCP 27015 from your own IP if you're the only admin who uses RCON externally
- Consider using SourceMod's in-game admin system for day-to-day management instead — it authenticates by Steam ID, not a shared password