Hey guys,
Thought that some of you might find this interesting if not helpful...
Be aware that there is a hack / glitch that allows someone to download your server.cfg and extract your RCON password, to fix this you have to have sv_allowdownload 0 in your server.cfg file.
Renaming it is not sufficent as they will hack into any .cfg file in your main.
Spyke