ANTI-VPN PLUGIN?

[TemptingMC]

Hello,


Any suggestions on how I would get my developers to write an anti VPN/proxy plugin?


Don't link me to the following public plugins as I already know about them:
http://www.spigotmc.org/resources/noproxy.979/ (doesn't work)
http://dev.bukkit.org/bukkit-plugins/easy-anti-join-bot-proxie/


Thanks.

 

[pisto]

It is possible to ban most VPNs by just looking at the kind of organization that an IP belongs to. Datacanter -> ban, DSL (or handpicked whitelist) -> good to go. Skepticism is unneeded here, and I suspect it stems from inexperience as a server owner, or bad faith. And yes, it's a trade-off between welcoming legit players wanting some IP anonymity (they are *few*), and keeping away the huge majority of assholes who think that the Internet is free land to release their real life frustrations. As a server admin, I chose the latter and I'm extremely happy with my choice.

 

[Solistica]

It is possible to ban most VPNs by just looking at the kind of organization that an IP belongs to. Datacanter -> ban, DSL (or handpicked whitelist) -> good to go. Skepticism is unneeded here, and I suspect it stems from inexperience as a server owner, or bad faith. And yes, it's a trade-off between welcoming legit players wanting some IP anonymity (they are *few*), and keeping away the huge majority of assholes who think that the Internet is free land to release their real life frustrations. As a server admin, I chose the latter and I'm extremely happy with my choice.

Yes and No. It's not difficult to make your own VPN that the plugin would very likely not pick up on, or even rent a cheap VPS from a reputable host and create one there. At the end of the day, you're very likely going to end up blocking a lot of players that are not trying to be malicious and just using the internet like everybody else, because 1 person on that ISP or host is using a VPN.

This type of plugin is targeting the 1 guy out of a crowd of 100 people, and sadly cannot at the current state in technology, be take care of effectively without possibly effecting the other 99.

 

[pisto]

It's not difficult to make your own VPN that the plugin would very likely not pick up on, or even rent a cheap VPS from a reputable host and create one there.

You just said yourself, rent a cheap VPS. And that datacenter is either already blocked, or you are going to seed a new organization and all its IPs into my block list. My solution already contains 70 million IPs, which is very close to what you get from paid solutions (https://www.blocked.com/ , 300$, they claim to have 78 million datacenter IPs blocked). What can I offer you as a proof more than that this system is working wonderfully for me already?

 

[Solistica]

What can I offer you as a proof more than that this system is working wonderfully for me already?

What can you offer as proof that you're not unintentionally blocking a lot of people who A. Use a VPN for a good reason. B. Might be using services by that host and be effected none the less?

What you're doing is prosecuting IP's as guilty until proven guilty. Which you totally can, it's your server, your choice. Not what I'd recommend, but to each their own. Especially in a game that basically brought Dos, DDos'ing, and VPN's into the popular public use area. As where before you used it when you had a good reason and the knowledge to support it. I don't know 1 person on my Skype that doesn't have access to or use a VPN.

Like I said though, not trying to change your mind, just trying to point out some things.

 

[pisto]

I understand your point, and indeed in my game people still haven't figured out that you can ddos individual players. This system necessitates a authentication behind proxy/whitelisting system, and I have and do use it. Maybe that is not stressed enough well in my repo, because its implementation has to be specific to each game. Peace.