IPLock
Protect your players! >> have a second login
This plugin allows you to require everyone or just selected players to authenticate their IP with a password set by them. This creates a second layer of security for servers. All data is stored encryptet on the server for maximal security. If someone joins with your name, but not with your IP he will be kicked. This plugin works great to protect admin and staff accounts on offline servers.
Setup
- Copy JAR to your plugins folder
- Edit the settings.yml in IPL folder => everybody:false means that IPLock is not required for everybody... true is self-explaining ;-)
- In case you have a firewall on your server make sure to free port 2004
- Give all users that you want to use IPL the permission node ipl.basic
- Each user with ipl.basic needs to login and use "/ipl register [password]" to make it function for them
- Dowload the updater, link appears ingame when you register
- Once they have registered they open the updater tool and enter the server info, then click start to update the server with their IP
Source
GitHub: volpi3000's sourcePermissions
- ipl.basic - Gives access to register with the server
- ipl.admin - Gives access to manage users
Commands
- /ipl help - Show IPL Help (ipl.basic)
- /ipl register [password] - Register yourself with the server (ipl.basic)
- /ipl unregister [username] - Remove a user from the list (ipl.admin)
Example Config
Upcoming Features
- WebInterface
With this plugin, whom I could not get it to ban ever again?
@doomlordking
Dear friend,
as far i know that message is not from IPL. Its related to another plugin... Such Griefprevention or Xauth, or even NCP to block multiple players on same IP. Please check it in that direction. Only message you got from IPL is in file named messages.yml
Please edit that file as you find fit, and check other plugins which could prevent you to log in from different IPs with many player names.
I think that Grief prevention will call it in cfg.yaml something like SmartBan=true (not 100% sure)
i don't know if you know this yet but........ i locked my ip and had a friend log in as me and it kicked me then kick him. So the plugin blocks people, but kicks you over and over again with message "you have log in from another location".
@ha11oga11o
That is just the right way to use it
Hello,
i see you add wildcards in IP. Can i actually do this or somehow else?
192.168.*.*
192.168.*.211
If so, it will be great :)
@Zilacon
Dear friend,
i cant understand what better reviews youre need? I have nasty buggers 24/7 at mine server gates, ddos, login in at staff accounts, constant truing to crack staff xauth accounts and things. Its bit a challenge for children. Thing is, i just add staff IP or DNS and theres no way someone can join server!! I tried last nite with everything, its impossible!! Until CB update and fck up something... again... Now they cant even touch server even with join in. Plugin do face-palm thing with configurable message (mine favorite ability).
So yeah, this plugin is simple enough to be excellent and not too complicated to be exploited and buggy. It just works and thats it!
Only i suggest disable in game permissions to remove users from locked list. I can do it only from console, so security level is higher possible.
Cheers!
I think ill wait until this gets better reviews... And i had a glimpse of hope i can throw away ipsecurity...
the new Version is still waiting for aproval :-(
@marvinej
What to say? Thank you for detailed explanations :)
Ill try new version and revert if thers problems. And i was testing in local LAN thou :/
Cheers!
@ha11oga11o
problems:
@marvinej
Marvinej,
thing is... Imusing this plugin for a while. And i just update its 5 mins ago with latest.
problems:
1. commands not working on console
2. cant merge old lock.yaml with database
3. when started like that (with lock.yaml crashing it at start) i got these messages
4. when i add player with fake dns like ban.go they can enter game,and no IPL triger at all on console (is it listening at all?)
5. very important thing is command /ipl list so we can see who is locked to IP (since i really dont know how to edit db files - i think amyn of u have same issue:)
5.in console is needed to inform us that player is kicked because of wrong IP
When i delete lock.yaml seems plugin started but i can add users only from client, not from console.
Hope this help so far?
Oh yeah, server is on desktop because this is testing machine, i cannot play on production server, dont i?
@ha11oga11o
21:55:36 [SEVERE] java.sql.SQLException: path to 'plugins/ipl/ipl.db': '/home/ha11oga11o/Desktop/Minecraft/plugins/ipl' does not exist
This means that is is looking for your /plugins/ipl/ folder and can not find it.
Make sure you are using the latest CraftBukkit BETA build, not the DEV builds.
also your desktop isn't the ideal place to run a server from.....
And this:
Sorry for spam here, but i have only 2 minutes, and must go.
21:56:21 [INFO] ervin[/92.36.145.74:23443] logged in with entity id 14292 at ([Jugoslavia] -3884.699999988079, 71.0, -1161.5058458136314)
21:56:21 [SEVERE] Could not pass event PlayerJoinEvent to IPL v1.3.0
org.bukkit.event.EventException
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:341)
at org.bukkit.plugin.RegisteredListener.callEvent(RegisteredListener.java:62)
at org.bukkit.plugin.SimplePluginManager.fireEvent(SimplePluginManager.java:477)
at org.bukkit.plugin.SimplePluginManager.callEvent(SimplePluginManager.java:462)
at net.minecraft.server.ServerConfigurationManagerAbstract.c(ServerConfigurationManagerAbstract.java:153)
at net.minecraft.server.ServerConfigurationManagerAbstract.a(ServerConfigurationManagerAbstract.java:93)
at net.minecraft.server.NetLoginHandler.d(NetLoginHandler.java:132)
at net.minecraft.server.NetLoginHandler.c(NetLoginHandler.java:45)
at net.minecraft.server.DedicatedServerConnectionThread.a(DedicatedServerConnectionThread.java:44)
at net.minecraft.server.DedicatedServerConnection.b(SourceFile:29)
at net.minecraft.server.MinecraftServer.r(MinecraftServer.java:595)
at net.minecraft.server.DedicatedServer.r(DedicatedServer.java:222)
at net.minecraft.server.MinecraftServer.q(MinecraftServer.java:493)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:426)
at net.minecraft.server.ThreadServerApplication.run(SourceFile:856)
Caused by: java.lang.NullPointerException
at de.mc_zone.ipl.IPLock.normalJoin(IPLock.java:182)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.bukkit.plugin.java.JavaPluginLoader$1.execute(JavaPluginLoader.java:339)
... 14 more
@Darinator101
It can be for whatever you want to make use of it for i guess. Personally i use it to make sure my OP's accounts are protected from hackers.
What is this plugin actually for? Is it to give better security to your ip?
Hopefully the rewrite will fix the issue I'm still having. I just tried 1.4.5 BETA and the problem still remains. If you add a user to the lock file with a domain name that doesn't resolve to any IP at all the user is allowed to sign on normally and the following error is thrown in the console http:pastebin.com/tpuHrq7C
Obviously this can lead to a huge security hole if for any reason an IP isn't returned when a domain is looked up. We've had this happen once when somebody forgot to check their emails and their domain expired and wasn't resolving to an IP any longer. Other than this one issue this plugin is great.
I am doing a complete rewrite of the plugin and i am testing it right now. I will publish a beta this week. :-)
how do I bypass this thing?? XD
I just start it on mine test server and i got this. See line number 327, its
[WARNING] Unexpected exception while parsing console command "ipl add"
Log is here:
https://dl.dropbox.com/u/31483374/server.log
hello,
those who are bypassing ipl are added on console as it follows:
ipl add [nick] ban.go
Im testing new version and ill let you know whats happening. May thnx for fast coding :)