Add this to your server.cfg: set sv_requestParanoia 3 sv_endpointprivacy true sv_forceIndirectListing true sv_useDirectListing true sv_authMinTrust 4 ( http: // ip: port / players.json and ddos layer 7 get blocked )