Currently admins can prevent their secure servers from taking part in Valve's global banning. Erik Johnson posted this to the HLDS mailing list:
If you block port 27011, you won't globally ban people right now. In the future, you'll be required to open that port.It is good know that eventually people who try to test a cheat to see if it can be detected will risk getting banned from all secure servers.
Erik
Comment