IPTables Help

Status
This thread has been locked.

iToady

TopTierSMM.com
Supreme
Feedback score
2
Posts
74
Reactions
21
Resources
0
I have a VPS with Pterodactyl setup on it.
I caught someone today trying to log into my account via cracked client, but I stopped the servers before he could do anything.

Basically I just need someone who can help me secure my Bungee network, only has 3 spigot servers connected to the bungee server.
 
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

Valentino

Future president
Supreme
Feedback score
22
Posts
196
Reactions
94
Resources
0
Use plugin called ipwhitelist or just enable firewall.
Do "ufw enable" if you use ubuntu. Don't forget to allow ports before you enable it.
 

iToady

TopTierSMM.com
Supreme
Feedback score
2
Posts
74
Reactions
21
Resources
0
Use plugin called ipwhitelist or just enable firewall.
Do "ufw enable" if you use ubuntu. Don't forget to allow ports before you enable it.
If I use ufw what ports would I enable? Just 25565 or all my servers ports?
 

Buxarov

Premium
Feedback score
2
Posts
0
Reactions
39
Resources
41
Hello, There are many ways to protect a server and more if it is Bungee (I write this in case someone else is looking for help)


the main thing would be to activate the firewall, if you can not do this, I recommend you use IPWL (IPWhitelist) for protection is placed on all servers Spigot not in the Bungee.

Although it does not seem like much, if you use a system of travel between servers using a portals plugin, I recommend you use AuthmeBungee, because if they cause a lag on the server, they can go to the portal and establish a connection.

Many people who are dedicated to the servers destroy, often say they have a way to bypass ipwhitelist, it is better to prevent than regret, I recommend that you renew, use AuthmeBungee and UUIDSpoof - FIX


By the way, it's not that I want to digress a lot, but, a protection of Bots, it's also a protection xD, I recommend Bot-Sentry before ABD, it uses a lot less resources


About IPWhitelist, some people say that they have a kickeo error when trying to join the server "You are already connected" happened to me, this is an add-on "IPWhitelist FIX" that fixes this, I have tried it and for now, I was not expelled
recently , I hope not to forget anything:p, greetings and luck!


References

IPWhitelist

BotSentry

UUIDSpoof

IPWhitelist Fix

BungeePortals
 

iToady

TopTierSMM.com
Supreme
Feedback score
2
Posts
74
Reactions
21
Resources
0
Hello, There are many ways to protect a server and more if it is Bungee (I write this in case someone else is looking for help)


the main thing would be to activate the firewall, if you can not do this, I recommend you use IPWL (IPWhitelist) for protection is placed on all servers Spigot not in the Bungee.

Although it does not seem like much, if you use a system of travel between servers using a portals plugin, I recommend you use AuthmeBungee, because if they cause a lag on the server, they can go to the portal and establish a connection.

Many people who are dedicated to the servers destroy, often say they have a way to bypass ipwhitelist, it is better to prevent than regret, I recommend that you renew, use AuthmeBungee and UUIDSpoof - FIX


By the way, it's not that I want to digress a lot, but, a protection of Bots, it's also a protection xD, I recommend Bot-Sentry before ABD, it uses a lot less resources


About IPWhitelist, some people say that they have a kickeo error when trying to join the server "You are already connected" happened to me, this is an add-on "IPWhitelist FIX" that fixes this, I have tried it and for now, I was not expelled
recently , I hope not to forget anything:p, greetings and luck!


References

IPWhitelist

BotSentry

UUIDSpoof

IPWhitelist Fix

BungeePortals

I tried IPWhitelist, but I guess the way my bungee config it setup it won't work, the bungee config keeps setting my IP to 0.0.0.0 and I can't set it to the servers IP.
 

Tripps

SysAdmin | Developer
Premium
Feedback score
19
Posts
785
Reactions
313
Resources
0
When it comes to Pterodactyl and making sure it is fully secure you will need to make sure all ports are locked down through your firewall only allowing the local ip addresses within the pterodactyl nic (pterodactyl0).
Code:
To                         Action      From
--                         ------         ----
3306 on pterodactyl0       ALLOW   172.18.0.0/24
25565/tcp                  ALLOW       Anywhere
25565/udp                  ALLOW       Anywhere

Also sub servers must be on 127.0.0.1 within pterodactyl's daemon allocations.
 

iToady

TopTierSMM.com
Supreme
Feedback score
2
Posts
74
Reactions
21
Resources
0
When it comes to Pterodactyl and making sure it is fully secure you will need to make sure all ports are locked down through your firewall only allowing the local ip addresses within the pterodactyl nic (pterodactyl0).
Code:
To                         Action      From
--                         ------         ----
3306 on pterodactyl0       ALLOW   172.18.0.0/24
25565/tcp                  ALLOW       Anywhere
25565/udp                  ALLOW       Anywhere

Also sub servers must be on 127.0.0.1 within pterodactyl's daemon allocations.
So when I setup ports for the node, use 127.0.0.1 not the server IP? that kinda makes sense lol
 

Tripps

SysAdmin | Developer
Premium
Feedback score
19
Posts
785
Reactions
313
Resources
0
So when I setup ports for the node, use 127.0.0.1 not the server IP? that kinda makes sense lol
Yup basically, just make sure to allow the servers access on the local network (172.18.0.x).

[Edit] We also provide support through the discord in regards to pterodactyl: https://discord.gg/pterodactyl
 
Last edited:
Status
This thread has been locked.
Top