BlacklistCheck

Table of Contents

Blacklist Check

Overview

This plugin is designed to use public DNS Blacklist servers to check incoming connections and disallow anyone using a known public proxy from being able to connect. The list of DNSBL servers used is configurable.

Features

Stop grief before they even connect
Increased security
(v0.2) Whitelist known IP addresses to always allow connections
(v0.3) Whitelist entire IP subnets
(v0.5) Choose to block the connection until the address may be verified, or allow the connection and kick if they are blacklisted

Configuration

Plugin Configuration

DNSBLServers (v0.1) A list of DNS servers that will resolve blacklisted IP addresses
Whitelist (v0.2) A list of IP addresses that will always be allowed in and will not be checked against the DNSBL servers. NOTE: As of v0.3 these addresses must be in CIDR notation. For example to enter a single IP address use "127.0.0.1/32" to allow an entire class C subnet use "192.168.1.0/24". Please be sure to update the config file when upgrading from v0.2.
Debug (v0.3) (Boolean) [Default: false] A directive to have the plugin print more information to the console
LogDisconnects (v0.4) (Boolean) [Default: true] A directive to have the plugin output connection refusals to the console
DelayCheck (v0.5) (Boolean) [Default: false] A directive to have the plugin allow the connection, then thread the DNS lookups. This option is not recommended, as there will be a period of time when they will be connected to the server until the DNS lookup returns. It will, however, not delay the connection process.
DisconnectMessage (v0.5) (String) [Default: "Connected from a publicly blacklisted server!"] The configurable message to send along with the disconnect / kick.
LogToFile (v0.6) (Boolean) [Default: true] A directive to have the system log to the BlacklistCheck.log file in the plugin's directory for debug and disconnect messages.

Installation

To install the plugin, simply place the jar in the plugins directory

Bugs / Known Limitations

The default server list contains 8 DNS servers, checking each one takes time. Increasing this list will cause client timeout errors (without the DelayCheck configuration directive)
The client will be disconnected if even one DNS server returns a result for the address

Future Plans

Try to incorporate any additional user requests.

Comments

_ForgeUser7922596
- Join Date: 11/21/2011
- Posts: 96
- Member Details
#40 _ForgeUser7922596

View User Profile

Send Message

Posted Oct 23, 2012
New: http://dev.bukkit.org/server-mods/easy-anti-join-bot-proxie/

Rollback Post to Revision RollBack
_ForgeUser7498523
- Join Date: 9/4/2011
- Posts: 161
- Member Details
#39 _ForgeUser7498523

View User Profile

Send Message

Posted Sep 28, 2012
does this block users using proxies?

Rollback Post to Revision RollBack
_ForgeUser9147711
- Join Date: 7/6/2012
- Posts: 177
- Member Details
#38 _ForgeUser9147711

View User Profile

Send Message

Posted Aug 19, 2012
update please

Rollback Post to Revision RollBack
_ForgeUser9147711
- Join Date: 7/6/2012
- Posts: 177
- Member Details
#37 _ForgeUser9147711

View User Profile

Send Message

Posted Jul 28, 2012
This plugin still work with R5, or you will make an Update ?

Rollback Post to Revision RollBack
Adondriel
- Join Date: 10/29/2011
- Posts: 458
- Member Details
#36 Adondriel

View User Profile

Send Message

Posted Jul 14, 2012
would adding http://www.proxybase.org/ work?

Rollback Post to Revision RollBack
Forge_User_14331889
- Join Date: 1/16/2012
- Posts: 1
- Member Details
#35 Forge_User_14331889

View User Profile

Send Message

Posted Jun 9, 2012
@ArchmageInc

Just a clarification on the Zen blacklist for anyone considering using it:

The Zen blacklist is a composite that includes the PBL (in addition to the XBL and SBL).

The PBL's purpose is to stop mail (usually Spam) from IP's which should (for one reason or another) never send mail directly,

Unfortunately many residential Internet Providers list all their dynamic IP's in the PBL to prevent spam, therefore adding Zen as a blacklist would prevent a large amount of minecraft players from connecting to a minecraft server,

Therefore adding it to your minecraft server would not be a good plan, unless you feel like whitelisting a large portion of your userbase.
<<reply 686051>>

Rollback Post to Revision RollBack
ERRonLoad
- Join Date: 8/27/2011
- Posts: 565
- Member Details
#34 ERRonLoad

View User Profile

Send Message

Posted Jun 7, 2012
this plugin creates a lot of lag for me.. will making the delaycheck true abate this lag? no sooner did i shut this plugin down to fix lag, did i get hit by a proxy pwnage attack.. so its definitely a crucial plugin, but it also does a real number on performance, specifically i think when one of the dnsbl servers is running latent. any ideas?

Rollback Post to Revision RollBack
_ForgeUser1229275
- Join Date: 10/5/2008
- Posts: 34
- Member Details
#33 _ForgeUser1229275

View User Profile

Send Message

Posted May 27, 2012
Please add the following functionality:

1. Command to add a currently online users IP to the whitelist. i.e. /dnsbl add <playername>

2. Either add blacklist or add functionality to execute a banip command. The blacklist functionality would be for those who for whatever reason don't have banip understanding or functionality (I don't need that). More specifically though this would make the 'DelayCheck' functionality much much more useful. This would allow users to join but then if it is determined that their IP is in one of the BL repositories it would just ban the ip. or add it to the blacklist.

3. Just a suggestion but if you would add functionality to automatically add a player's IP to the whitelist after they have spent xxx minutes, hours, etc etc online that would be awesome. For the moment anyway that functionality would probably be best served if you would allow the plugin to submit queries to a LogBlock database.

Thanks

Cecell

Rollback Post to Revision RollBack
munkybacon
- Location: Lafayette
- Join Date: 7/21/2008
- Posts: 27
- Member Details
#32 munkybacon

View User Profile

Send Message

Posted May 26, 2012
Very awesome plugin, you have saved me on more than one occasion. Keep up the good work, I owe you a donation for saving me from downtime

Rollback Post to Revision RollBack
_ForgeUser6909514
- Join Date: 5/28/2011
- Posts: 9
- Member Details
#31 _ForgeUser6909514

View User Profile

Send Message

Posted May 25, 2012
People don't realize how important this plugin is. There is no other current working plugin that performs the function of blocking connections from IPs listed in DNSBLs. Without this plugin, you are forced to use nasty firewall configurations. It will be unfortunate if this plugin doesn't see more activity by the time proxy flooders become more rampant than they already are. I know there are already tools out there that can effectively DoS a server by connecting through many proxies and massively text flooding. If I remember correctly, the name of the tool used to proxy flood my server contained the word "PWN", but I can't remember the exact name.

Rollback Post to Revision RollBack
_ForgeUser1229275
- Join Date: 10/5/2008
- Posts: 34
- Member Details
#30 _ForgeUser1229275

View User Profile

Send Message

Posted May 12, 2012
@tremor77:

I'm having the same problem.

Rollback Post to Revision RollBack
_ForgeUser7993968
- Join Date: 12/1/2011
- Posts: 317
- Member Details
#29 _ForgeUser7993968

View User Profile

Send Message

Posted May 2, 2012
@ArchmageInc

Hey! Would you be interested in helping me implement DNSBL in my plugin that's found here? If not, I totally understand, I'll figure it out when I get the time.

Thanks!

-xDrapor

Rollback Post to Revision RollBack
_ForgeUser8237554
- Join Date: 1/11/2012
- Posts: 88
- Member Details
#27 _ForgeUser8237554

View User Profile

Send Message

Posted Apr 19, 2012
@CoolOppo

The DNSBL servers included in the configuration are merely to provide context and are considered the most common DNSBL servers available. There is no reason not to use ZEN to replace the list in the configuration. That is the beauty of configuration, you may use it as you see fit.

Rollback Post to Revision RollBack
_ForgeUser6878637
- Join Date: 5/23/2011
- Posts: 97
- Member Details
#26 _ForgeUser6878637

View User Profile

Send Message

Posted Apr 19, 2012
Why not use ZEN instead of XBL? http://www.spamhaus.org/zen/

Rollback Post to Revision RollBack
_ForgeUser8237554
- Join Date: 1/11/2012
- Posts: 88
- Member Details
#25 _ForgeUser8237554

View User Profile

Send Message

Posted Apr 19, 2012
@tremor77

tremor77,

I am not sure what is causing this, as the error shown is within Minecraft itself. If the error stops when removing this plugin, it may somehow be causing it. I will do my best to investigate this, though no one else has reported such an issue.

Rollback Post to Revision RollBack
_ForgeUser8237554
- Join Date: 1/11/2012
- Posts: 88
- Member Details
#24 _ForgeUser8237554

View User Profile

Send Message

Posted Apr 19, 2012
@epicbastion

I have addressed this in v0.6. There is now a directive to have the system log to an external file instead of directly to the console. This will also include debug messages.

Rollback Post to Revision RollBack
_ForgeUser7456779
- Join Date: 8/28/2011
- Posts: 95
- Member Details
#23 _ForgeUser7456779

View User Profile

Send Message

Posted Apr 19, 2012
Great plugin, my server just found the first listed ip, I have only had the plugin for 3 days so you saved me some grief.

I did have one request if possible. could this log to a file instead of the console? when these freaks try to connect they just keep trying and it spams the console, i know i can turn that off but it would be nice to have a log file that i can do reverse dns on and report the spamming to the ip owners/companies.

Thanks for your plugin.

Rollback Post to Revision RollBack

ERRonLoad

Join Date: 8/27/2011
Posts: 565
Member Details

#22 Posted Apr 18, 2012

Getting alot of this when this plugin is installed:

09:04:56 [INFO] Disconnecting honeydew101 [/81.132.50.87:54184]: Internal server error
09:04:56 [WARNING] Failed to handle packet: java.lang.NullPointerException
java.lang.NullPointerException
        at net.minecraft.server.ServerConfigurationManager.attemptLogin(ServerConfigurationManager.java:207)
        at net.minecraft.server.NetLoginHandler.b(NetLoginHandler.java:102)
        at net.minecraft.server.NetLoginHandler.a(NetLoginHandler.java:41)
        at net.minecraft.server.NetworkListenThread.a(NetworkListenThread.java:61)
        at net.minecraft.server.MinecraftServer.w(MinecraftServer.java:551)
        at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:449)
        at net.minecraft.server.ThreadServerApplication.run(SourceFile:492)

problem goes away when removing this plugin.

_ForgeUser8237554
- Join Date: 1/11/2012
- Posts: 88
- Member Details
#21 _ForgeUser8237554

View User Profile

Send Message

Posted Apr 12, 2012
@kozzy68

You can enable debugging, which will show you all of the attempts to lookup the addresses.

Rollback Post to Revision RollBack
_ForgeUser8102634
- Join Date: 12/18/2011
- Posts: 136
- Member Details
#20 _ForgeUser8102634

View User Profile

Send Message

Posted Apr 12, 2012
looks good now thanks, tho it works so fast that I hope it really does try to reslove those ips :)

Last edited by _ForgeUser8102634: Apr 12, 2012

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

37361
Created

Mar 8, 2012
Last Released File

Apr 19, 2012
Total Downloads

5,822
License

Public Domain

Bukkit

BlacklistCheck

Bukkit Plugins

BlacklistCheck

Table of Contents

Blacklist Check

Overview

Features

Configuration

Plugin Configuration

Installation

Bugs / Known Limitations

Future Plans

See Also

Comments

About This Project

Categories

Members

Recent Files

Bukkit