Making sure a TS server is secure

[RenegadeOTV]

I would like to test out a teamspeak server before I rent one, before I have my friends try and connect I want to make sure it's secure for, what do I need to do? I'd rather not get exploited somehow, especially from my friends, I'd never hear the end of it :p

[Magic Power]

If you're using Windows............ whahahahahaaaaaaaaaaaa :)

If you're using Linux, put the TS Server on it's own computer, run it as a normal restricted user, require a password to access the TS Server, run it on a different port number, disallow the TCPQuery and WebAdmin ports, remove rights for all users (even Server Admin), etc etc.

Seriously, there are tons of options possible for both Windows and Linux. As far as I know, the two worst things that can happen are:

1. Users use it so much that the rest of the Server becomes unusable (full bandwidth used by TS). In this case, require passwords for all users or restrict codecs and number of users.

2. Some sort of buffer overflow misused, and gained rights on the system. Best bet against this is to run the server as a normal user, or in a chrooted environment (Linux).

[guldi]

I guess the most important thing is, to give SA right ONLY to user you do fully trust !

[Brain]

... and the second most important thing: SAs should not be allowed to grant or revoke SA. Since SA privileges are nothing you casually give away this should be done via webinterface and superadmin login.
Of course, if you're not running your own server but renting one this one would be kind of impossible.

[-[BBD]-MotherFo]

yeah brain thats a smart idea I'm gonna change mine like that when I get home hehe :D but also passwording your server is a smart idea as well