This plugin is designed to use public DNS Blacklist servers to check incoming connections and disallow anyone using a known public proxy from being able to connect. The list of DNSBL servers used is configurable.
- Stop grief before they even connect
- Increased security
- (v0.2) Whitelist known IP addresses to always allow connections
- (v0.3) Whitelist entire IP subnets
- (v0.5) Choose to block the connection until the address may be verified, or allow the connection and kick if they are blacklisted
- DNSBLServers (v0.1) A list of DNS servers that will resolve blacklisted IP addresses
- Whitelist (v0.2) A list of IP addresses that will always be allowed in and will not be checked against the DNSBL servers. NOTE: As of v0.3 these addresses must be in CIDR notation. For example to enter a single IP address use "127.0.0.1/32" to allow an entire class C subnet use "192.168.1.0/24". Please be sure to update the config file when upgrading from v0.2.
- Debug (v0.3) (Boolean) [Default: false] A directive to have the plugin print more information to the console
- LogDisconnects (v0.4) (Boolean) [Default: true] A directive to have the plugin output connection refusals to the console
- DelayCheck (v0.5) (Boolean) [Default: false] A directive to have the plugin allow the connection, then thread the DNS lookups. This option is not recommended, as there will be a period of time when they will be connected to the server until the DNS lookup returns. It will, however, not delay the connection process.
- DisconnectMessage (v0.5) (String) [Default: "Connected from a publicly blacklisted server!"] The configurable message to send along with the disconnect / kick.
- LogToFile (v0.6) (Boolean) [Default: true] A directive to have the system log to the BlacklistCheck.log file in the plugin's directory for debug and disconnect messages.
- To install the plugin, simply place the jar in the plugins directory
Bugs / Known Limitations
- The default server list contains 8 DNS servers, checking each one takes time. Increasing this list will cause client timeout errors (without the DelayCheck configuration directive)
- The client will be disconnected if even one DNS server returns a result for the address
- Try to incorporate any additional user requests.
DNSBL is a common practice to block spammers and other unwanted traffic. For a full description about how DNSBL operates, a list of available public DNSBL servers, and other information, use Google.