(02-21-2012, 03:20 PM)Michael Wrote: [ -> ]we certianly need some kind of anti flyhack and x-ray stopper, on all of the servers.
I have looked at the plugins Craigpd posted about, and tried to find plugins that we need the most, and do the most things at once, to make installing and setting them up easier for Mike. Installing only 2 plugins is much easier than installing say... 5.
A solution to most of our hack problems:
Nocheat was abandoned not too long ago. Recently, the NoCheat dev released the code for his plugin, and someone else has continued the project. It is now called NoCheat+, and has a huge list of hacks/cheats it blocks, including flying, speed hacks, invinciblity, and much more. Although NoCheat has many of these features, NoCheat+ has more features. Click the image above for more info.
Quote:Miscellaneous:
- Disable Zombe's mod (fly, noclip, cheat); NEW!
- Disable CJB's mod (fly, xray, radar); NEW!
- Disable Rei's Minimap (cave, radar); NEW!
- Disable Minecraft AutoMap (ores, cave, radar); NEW!
- Disable Smart Moving (climbing, swimming, crawling, sliding, jumping, flying); NEW!
- Restrict the OP management commands to a console usage only. NEW!
This plugin was already posted by Craigpd, and looks like a great plugin. As many of you know, minecraft servers start doing weird things when the world gets too large. This plugin limits the world size. If we need more space, all we have to do is create multiple worlds. Our servers will be much more stable with this plugin. Click the image above for more information.
(05-07-2012, 03:34 PM)OinkRider29 Wrote: [ -> ]we already have it
Yes, but NoCheat
+ has many new features. Also, the NoCheat is no longer being actively developed meaning that if new hacks come out, it won't be updated to deal with them.
I used world downloader to back up the rp server ages ago and it really works well, keep it up South! also nocheat + is a good idea, but clients such as nodus get past this. Nodus has a built in irc to get griefers etc and hundreds of non detectable hacks
Craig's idea is good but would require constant monitoring
(05-07-2012, 04:02 PM)bmanrules Wrote: [ -> ]I used world downloader to back up the rp server ages ago and it really works well, keep it up South! also nocheat + is a good idea, but clients such as nodus get past this. Nodus has a built in irc to get griefers etc and hundreds of non detectable hacks.
Clients will always find out how to get past whatever plugins we have, but if we stay alert and update to the latest version of our security plugins, we should be able to deal with 99% of the players with hacked clients. Due to the nature of the internet, there will always be a 1% who can bypass our security.
As for the world downloader plugin, this is the best backup plugin ever made. Every OP should have this. Having a backup of our map in even just some player's .minecraft folders would be a godsend. Even if the player doesn't backup the whole world(It only backs up the chunks around you wherever you walk) if our server crashes, and we lose the map, we can restore most of it just from someone's save of the world.
[quote='craigpd' pid='24575' dateline='1336390331']
BUMP!
Just thought up a way of making it easier to detect nodus, but we may need to make our own plugin for it.
Basically, the idea I have is this-
-When a player joins it will display the standard "Has joined the game message"
-After this a command will run, which hopefully, will make the player say -help or other commands that hack clients use, such as .help -help *help etc.
-If the player who joined fails to say this but we know the plugin works, then we know that they are using a client.
We have 3 java coders in the community that I know of, Michielcx, Bmanrules and Jaojake1804.
This plugin may work but it may also require quite alot of tweaking to make it work as we intend it to.
http://forums.bukkit.org/threads/admn-se...-r1.70808/
Just grabbed Nodus to test your idea out. On a vanilla and a cracked server it seems that the console is not picking up when I try to use one of the stupid commands the nodus pack has. Your idea is good but it looks like we wouldn't be able to pick up them uing the command in the begining
(05-07-2012, 05:17 PM)dmanrules Wrote: [ -> ]Just grabbed Nodus to test your idea out. On a vanilla and a cracked server it seems that the console is not picking up when I try to use one of the stupid commands the nodus pack has. Your idea is good but it looks like we wouldn't be able to pick up them uing the command in the begining
Yeah. Nodus is clientside like all the other hacked clients. It never actually sends commands to the server itself when you type them in. They are sent to the Nodus mod itself.
As for blocking alt accounts, if you look on the Nodus' website, you can see that they disabled it. We no longer need this. If it becomes a huge problem we can just ip ban. This is built into our plugins already.
http://www.nodusgriefing.com/clientfaq.html
Quote:ALT DATABASE?
The alt database had constant problems, and was always down. It was really buggy, slow, and was just annoying. It's not being re-added.
Well it's clear that Nodus seems more of a problem for servers than a few months ago ( When it was badly coded and easily detectable.) The world border may be a problem as some people like to go far away from the spawn to get away from the majority of grief.
As for NoCheat+, I had tried to search for it but had no such luck in finding it anywhere. I checked Mcforums, the bukkit plugin list, even googled it but I only came up with results as to "Buy NoCheat+ On eBay, fast, secure and good quality Nocheat+ etc..".
I'll update Nocheat - I know all about the cat and mouse game of security
As far as you developers, we do have an SVN repository for programming. I can set y'all up with an svn if you have a specific project.
Nodus is clientside, meaning servers cant detect it dman, but it prevents players from saying -help. We could check each player when they log in by making them type -help using a plugin. Also alot of hacks use the following method to bypass server security: I had a mod for a day as a test which allowed you to import schematics into servers without being admin. You needed all the blocks in your inventory and the parts of the schematic only formed within your reach. Same way mass griefing tools work, only the blocks within your range get deleted to prevent the server noticing players do it.
Sent from my phone
