From www.sof2match.com ...(please don't sue me)

g_gametype
Sets the gametype that will be use on the next map change. The currently available options are “dm” (Deathmatch), “tdm” (Team Deathmatch), “elim” (Elimination), and “inf” (Infiltration).

g_availableweapons
Sets the weapons that are available for use on the server. Each weapon is represented as a 0, 1, or 2. When a weapon is set to 0 it will not be available for use at all. When a weapon is set to 1 it will only be available for use in gametypes that have weapon pickups only (ie. Not in infiltration). When set to 2 the weapon will be available in all gametypes. The default value is “2222222222211” which is all weapons are on in deathmatch gametypes but the RPG-7 and MM1 are disabled in infiltration and elimination. The weapons are in the following order:
Knife
M1911A
USSOCOM
M590 Shotgun
Micro Uzi
M3A1
USAS12
M4 Assault Rifle
AK74 Assault Rifle
MSG90A1 Sniper Rifle
M60 Machinegun
MM1 Grenade Launcher
RPG-7

fraglimit < # >
Sets the number of kills a single person must reach before the map is cycled. 0 turns this feature off. Default is 20

timelimit < # >
Sets the amount of time (in minutes) before the map is cycled. 0 turns this feature off. Default is 0.

g_inactivity < # >
Sets the amount of time (in seconds) before an inactive client is disconnected from the server. 0 turns this feature off. Default is 0.

teamlimit < # >
Sets the number of rounds a team must win (for Infiltration / Elimination) before the map is cycled. 0 turns this feature off. Default is 8.

g_friendlyfire <#>
Enables or disables friendly fire. When set to 1 you will be able to shoot and kill people on your own team. When set to 0 you will not be able to injure your own teammates, but will still be able to injure yourself.

g_speed < # >
This sets the base movement speed. Default is 280.

sv_maxrate < # >
Sets the maximum rate a client can set on the server. This helps throttle outgoing bandwidth. 0 means that no limit is enforced. Default is 0.

sv_hostname < name >
This sets the name of your server which will appear in the client’s server browser or in GameSpy. Default is “hostname”.

sv_maxclients < # >
Sets the maximum number of players your server will support. Default is 8.

g_password < password >
If a non-blank password is specified, your server will then require the clients to enter a password to join. If you specify a blank password, “”, then you will remove this password. Default is “” (no password).

g_allowvote < # >
Determines whether or not you allow clients to call votes on your server. 0 will prohibit clients from calling votes, while 1 will allow voting. Default is 1 (allows voting).

g_voteduration < # >
Sets the number of seconds a vote will stay up, so that a client may cast a vote. Default is 60.

g_timeouttospec <#>
Number of seconds before a client which is not sending the server data is automatically sent into spectator mode. The default is 15 seconds.

g_roundtimelimit <#>
Sets the number of minutes before the end of a “round” in either infiltration or elimination. Default value is 5 minutes.

g_suicidepenalty <#>
Sets the amount of score lost for killing yourself. The default value is –1.

g_teamkillpanelty <#>
Sets the amount of score lost for killing a teammate. The default value is –1.

sv_pure < # >
Sets your server into pure mode. Pure means that the data files on the client must exactly match the data files on the server. Any files which do not match up will be rejected. You must set this cvar from the command line (+set sv_pure 0) and not the console. Since the test does not allow any external data files, this cvar has no purpose. Default is 0 (not pure).

rconpassword < password >
If a non-blank password is specified, your server will have a remote console password. This allows the server operator to connect remotely to change server settings. If you specify a blank password, “”, then you will remove this password and disable remote console. Default is “” (disabled).

g_forcefollow <#>
Enables or disables the ability to fly around as a ghost. When set to 1 all clients will be forced to follow another client rather than having the option. When set to 0 all clients will have the freedom to fly around. Default value is 0.

g_followenemy <#>
Enables or disables the ability to follow an enemy when ghosting. When set to 1 you are allowed to follow enemies, when set to 0 you will only be allowed to follow your own teammates. Default value is 1.

Source: Soldier Of Fortune II Match...client codes can be found there as well (along with a ton of other good shit), but I saw a demand Server codes, and thus, I answered the call of the strangers. That previous sentence makes me gag in disgust.