AntiDirectConnect

AntiDirectConnect v2.0

AntiDirectConnect prevents your BungeeCord network servers from being hacked into by offline-mode hackers.

NOTE: DO NOT INSTALL THIS ON A NON-BUNGEE SERVER AS NO-ONE WILL BE ABLE TO CONNECT

BungeeCord by md_5 is brilliant, but its only flaw is that each individual server connected to it needs to be in offline mode, allowing hackers to connect as any user using Minecraft's offline mode feature.

This plugin aims to prevent this, by preventing all incoming traffic that isn't from BungeeCord's connection from logging in.

The plugin is currently known to be working.

Installation

1. Install this plugin on all Bukkit / Spigot servers on your network (NOT the BungeeCord proxy)
2. Restart your server, and if you can't direct connect, then it's working, otherwise comment down below because something went wrong...

Configuration

In version 2.0, a config.yml was added to the plugin!

Default config.yml:

allowed:
- 127.0.0.1

Add any IPs you want to allow (usually just the bungee server's IP) to the allowed section in the same form as the example above.

Permissions

There are no permissions, as an offline mode hacker could easily bypass the checks by logging in as op.

Commands

There are no commands, as there is no reason for there to be.

DISCLAIMER

If you are using Spigot, and you set:

bungee: true

in the spigot.yml, this plugin will not work.