Protect your players! >> have a second login

This plugin allows you to require everyone or just selected players to authenticate their IP with a password set by them. This creates a second layer of security for servers. All data is stored encryptet on the server for maximal security. If someone joins with your name, but not with your IP he will be kicked. This plugin works great to protect admin and staff accounts on offline servers.

Setup

Copy JAR to your plugins folder
Edit the settings.yml in IPL folder => everybody:false means that IPLock is not required for everybody... true is self-explaining ;-)
In case you have a firewall on your server make sure to free port 2004
Give all users that you want to use IPL the permission node ipl.basic
Each user with ipl.basic needs to login and use "/ipl register [password]" to make it function for them
Dowload the updater, link appears ingame when you register
Once they have registered they open the updater tool and enter the server info, then click start to update the server with their IP

* This Plugin can be automaticly updated with a plugin called CraftBukkitUpToDate

Source

GitHub: volpi3000's source

Permissions

ipl.basic - Gives access to register with the server
ipl.admin - Gives access to manage users

Commands

/ipl help - Show IPL Help (ipl.basic)
/ipl register [password] - Register yourself with the server (ipl.basic)
/ipl unregister [username] - Remove a user from the list (ipl.admin)

*As of IPLock 1.3.0 lock.yml has been replaced with SQLLite ipl.db which is located in your main folder with your craftbukkit.jar I HIGHLY recommend you use the ingame commands to modify it.
Example Config

Upcoming Features

WebInterface

Bugs and Feature Requests
Bug reports & Feature Requests

Video Tutorial

Comments

_ForgeUser9648119
- Join Date: 9/19/2012
- Posts: 145
- Member Details
#133 _ForgeUser9648119

View User Profile

Send Message

Posted Dec 19, 2012
With this plugin, whom I could not get it to ban ever again?

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#132 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 19, 2012
@doomlordking

Dear friend,

as far i know that message is not from IPL. Its related to another plugin... Such Griefprevention or Xauth, or even NCP to block multiple players on same IP. Please check it in that direction. Only message you got from IPL is in file named messages.yml

Please edit that file as you find fit, and check other plugins which could prevent you to log in from different IPs with many player names.

I think that Grief prevention will call it in cfg.yaml something like SmartBan=true (not 100% sure)

Rollback Post to Revision RollBack
doomlordking
- Join Date: 12/26/2010
- Posts: 103
- Member Details
#131 doomlordking

View User Profile

Send Message

Posted Dec 18, 2012
i don't know if you know this yet but........ i locked my ip and had a friend log in as me and it kicked me then kick him. So the plugin blocks people, but kicks you over and over again with message "you have log in from another location".

Rollback Post to Revision RollBack
_ForgeUser7447271
- Join Date: 8/26/2011
- Posts: 73
- Member Details
#130 _ForgeUser7447271

View User Profile

Send Message

Posted Dec 17, 2012
@ha11oga11o

That is just the right way to use it

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#129 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 17, 2012
Hello,

i see you add wildcards in IP. Can i actually do this or somehow else?

192.168.*.*
192.168.*.211

If so, it will be great :)

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#128 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 17, 2012
@Zilacon

Dear friend,

i cant understand what better reviews youre need? I have nasty buggers 24/7 at mine server gates, ddos, login in at staff accounts, constant truing to crack staff xauth accounts and things. Its bit a challenge for children. Thing is, i just add staff IP or DNS and theres no way someone can join server!! I tried last nite with everything, its impossible!! Until CB update and fck up something... again... Now they cant even touch server even with join in. Plugin do face-palm thing with configurable message (mine favorite ability).

So yeah, this plugin is simple enough to be excellent and not too complicated to be exploited and buggy. It just works and thats it!

Only i suggest disable in game permissions to remove users from locked list. I can do it only from console, so security level is higher possible.

Cheers!

Rollback Post to Revision RollBack
Zilacon
- Location: Portland
- Join Date: 10/20/2012
- Posts: 499
- Member Details
#127 Zilacon

View User Profile

Send Message

Posted Dec 17, 2012
I think ill wait until this gets better reviews... And i had a glimpse of hope i can throw away ipsecurity...

Rollback Post to Revision RollBack
_ForgeUser7447271
- Join Date: 8/26/2011
- Posts: 73
- Member Details
#126 _ForgeUser7447271

View User Profile

Send Message

Posted Dec 16, 2012
the new Version is still waiting for aproval :-(

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#125 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 16, 2012
@marvinej

What to say? Thank you for detailed explanations :)

Ill try new version and revert if thers problems. And i was testing in local LAN thou :/

Cheers!

Rollback Post to Revision RollBack
SirKratosAurion
- Location: Grand Rapids
- Join Date: 8/31/2011
- Posts: 60
- Member Details
#123 SirKratosAurion

View User Profile

Send Message

Posted Dec 15, 2012
@ha11oga11o

problems:

commands not working on console

If you read above console commands are planned in upcomming features

cant merge old lock.yaml with database

Unfortunately as i am not the Developer there is nothing i can do about that, But i recommend just writing them all back in via commands as the import feature is buggy at best right now.

when started like that (with lock.yaml crashing it at start) i got these messages

Unfortunately Lock.yml is no longer supported. Modifying it is supposed to work and import it to the db but the import is kinda buggy so i recommend sticking with re adding everyone from in-game for now.

when i add player with fake dns like ban.go they can enter game,and no IPL triger at all on console (is it listening at all?)

Note that when i tested it over the LAN or from LocalHost it doesnt appear to work, but it does work when used outside of a lan enviroment. At least according to the DEV it does.

very important thing is command /ipl list so we can see who is locked to IP (since i really dont know how to edit db files - i think amyn of u have same issue:)

A /ipl list command is planned for the future to come in along with indexing of entries for easier removal of entries.

in console is needed to inform us that player is kicked because of wrong IP

Not sure what to do about that... I blame volpi3000 lol
Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#122 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 15, 2012
@marvinej

Marvinej,

thing is... Imusing this plugin for a while. And i just update its 5 mins ago with latest.

problems:
1. commands not working on console
2. cant merge old lock.yaml with database
3. when started like that (with lock.yaml crashing it at start) i got these messages
4. when i add player with fake dns like ban.go they can enter game,and no IPL triger at all on console (is it listening at all?)
5. very important thing is command /ipl list so we can see who is locked to IP (since i really dont know how to edit db files - i think amyn of u have same issue:)
5.in console is needed to inform us that player is kicked because of wrong IP

When i delete lock.yaml seems plugin started but i can add users only from client, not from console.

Hope this help so far?

Oh yeah, server is on desktop because this is testing machine, i cannot play on production server, dont i?

Last edited by _ForgeUser7479931: Dec 15, 2012

Rollback Post to Revision RollBack
SirKratosAurion
- Location: Grand Rapids
- Join Date: 8/31/2011
- Posts: 60
- Member Details
#121 SirKratosAurion

View User Profile

Send Message

Posted Dec 15, 2012
@ha11oga11o

21:55:36 [SEVERE] java.sql.SQLException: path to 'plugins/ipl/ipl.db': '/home/ha11oga11o/Desktop/Minecraft/plugins/ipl' does not exist

This means that is is looking for your /plugins/ipl/ folder and can not find it.

Make sure you are using the latest CraftBukkit BETA build, not the DEV builds.

also your desktop isn't the ideal place to run a server from.....

Last edited by SirKratosAurion: Dec 15, 2012

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#120 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 15, 2012
And this:

Sorry for spam here, but i have only 2 minutes, and must go.

21:56:21 [INFO] ervin[/92.36.145.74:23443] logged in with entity id 14292 at ([Jugoslavia] -3884.699999988079, 71.0, -1161.5058458136314)
21:56:21 [SEVERE] Could not pass event PlayerJoinEvent to IPL v1.3.0
org.bukkit.event.EventException
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:341)
at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
at net.minecraft.server.ServerConfigurationManagerAbstract.c(ServerConfigurationManagerAbstract.java:153)
at net.minecraft.server.ServerConfigurationManagerAbstract.a(ServerConfigurationManagerAbstract.java:93)
at net.minecraft.server.NetLoginHandler.d(NetLoginHandler.java:132)
at net.minecraft.server.NetLoginHandler.c(NetLoginHandler.java:45)
at net.minecraft.server.DedicatedServerConnectionThread.a(DedicatedServerConnectionThread.java:44)
at net.minecraft.server.DedicatedServerConnection.b(SourceFile:29)
at net.minecraft.server.MinecraftServer.r(MinecraftServer.java:595)
at net.minecraft.server.DedicatedServer.r(DedicatedServer.java:222)
at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:493)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:426)
at net.minecraft.server.ThreadServerApplication.run(SourceFile:856)
Caused by: java.lang.NullPointerException
at de.mc_zone.ipl.IPLock.normalJoin(IPLock.java:182)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
... 14 more

Rollback Post to Revision RollBack
SirKratosAurion
- Location: Grand Rapids
- Join Date: 8/31/2011
- Posts: 60
- Member Details
#118 SirKratosAurion

View User Profile

Send Message

Posted Dec 15, 2012
@Darinator101

It can be for whatever you want to make use of it for i guess. Personally i use it to make sure my OP's accounts are protected from hackers.

Rollback Post to Revision RollBack
_ForgeUser10033241
- Join Date: 11/25/2012
- Posts: 78
- Member Details
#117 _ForgeUser10033241

View User Profile

Send Message

Posted Dec 15, 2012
What is this plugin actually for? Is it to give better security to your ip?

Rollback Post to Revision RollBack
_ForgeUser9300141
- Join Date: 7/27/2012
- Posts: 33
- Member Details
#116 _ForgeUser9300141

View User Profile

Send Message

Posted Dec 11, 2012
Hopefully the rewrite will fix the issue I'm still having. I just tried 1.4.5 BETA and the problem still remains. If you add a user to the lock file with a domain name that doesn't resolve to any IP at all the user is allowed to sign on normally and the following error is thrown in the console http:pastebin.com/tpuHrq7C

Obviously this can lead to a huge security hole if for any reason an IP isn't returned when a domain is looked up. We've had this happen once when somebody forgot to check their emails and their domain expired and wasn't resolving to an IP any longer. Other than this one issue this plugin is great.

Rollback Post to Revision RollBack
_ForgeUser7447271
- Join Date: 8/26/2011
- Posts: 73
- Member Details
#115 _ForgeUser7447271

View User Profile

Send Message

Posted Dec 11, 2012
I am doing a complete rewrite of the plugin and i am testing it right now. I will publish a beta this week. :-)

Rollback Post to Revision RollBack
_ForgeUser9680068
- Join Date: 9/24/2012
- Posts: 75
- Member Details
#114 _ForgeUser9680068

View User Profile

Send Message

Posted Dec 10, 2012
how do I bypass this thing?? XD

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#113 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 7, 2012
I just start it on mine test server and i got this. See line number 327, its

[WARNING] Unexpected exception while parsing console command "ipl add"

Log is here:

https://dl.dropbox.com/u/31483374/server.log

Last edited by _ForgeUser7479931: Dec 7, 2012

Rollback Post to Revision RollBack
_ForgeUser7479931
- Join Date: 9/1/2011
- Posts: 515
- Member Details
#112 _ForgeUser7479931

View User Profile

Send Message

Posted Dec 7, 2012
hello,

those who are bypassing ipl are added on console as it follows:

ipl add [nick] ban.go

Im testing new version and ill let you know whats happening. May thnx for fast coding :)

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.