Server protection?

[Timed]

Been reading on servers getting griefed, or players using clients to gain ability to fly, or break blocks. They are giving themselves permission basically. Is this an actual thing? Do I have to be worried?

I also want to protect my server from bots and things, does anyone have any plugin recommendations? I'm running spigot 1.8

 

[Latouth]

in spigot 1.8, there's a bug for forceop on signs/books
so clicking on it, (book text or sign itself) would activate and run a command (op, pex, manuadd, etc) essentially "giving" them access.
Use spigot 1.8.6 and above, they have a fix.
I'd recommend Spigot 1.8.9

 

[Latouth]

ForceOP isn't a real thing, unless you are running a vanilla server, and in that case people can use a book to op themselves. None of that stuff really exists.

For bots, get a plugin that limits the amount of connections from one IP. I'd go with three to allow users and their siblings.

Pretty sure spigot has that ability, maybe im mistaken.
But uhm, older spigot versions have the ability to use a book to op themselves, and signcrashers.

Edit: Even if your gonna run a server with no plugins (vanilla) I'd still recommend spigot for performance and bug fixes (Like sign crash, book to op themselves)

 

[Timed]

I think what Latouth is saying is right, spigot 1.8.6 has a fix for the sign or book thing, I have seen that before. I'm running 'spigot 1.8', it doesn't specific. Don't they have to do like '(.)somethinghere to do this, if so maybe I can disable putting a dot in front. Or figure out if I am infact running above 1.8.6.[DOUBLEPOST=1461190704][/DOUBLEPOST]Ive seen players crashing servers to, what's the deal with that?

 

[Latouth]

I think what Latouth is saying is right, spigot 1.8.6 has a fix for the sign or book thing, I have seen that before. I'm running 'spigot 1.8', it doesn't specific. Don't they have to do like '(.)somethinghere to do this, if so maybe I can disable putting a dot in front. Or figure out if I am infact running above 1.8.6.[DOUBLEPOST=1461190704][/DOUBLEPOST]Ive seen players crashing servers to, what's the deal with that?

do /version ingame, and post a picture or type the results here.

 

[Latouth]

If it says 1.8, you're running 1.8.

I recommend switching to 1.8.9, as 1.8 doesn't have the fix.

I've seen hosts that say "Spigot 1.8" But it's spigot 1.8.9... so, running a /version would help alot.

 

[Timed]

Gyazo - bcdad7e7663014f95f5fd85f6ae20c36.png[DOUBLEPOST=1461190839][/DOUBLEPOST]yeah fadehosts doesn't specify which exact snapshot

 

[Timed]

I've seen hosts that say "Spigot 1.8" But it's spigot 1.8.9... so, running a /version would help alot.

K so would you recommend a plugin that will limit it to 3 players with the same ip to join, also maybe blocking vpn's if possible. let me know

and which plugin

 

[Latouth]

K so would you recommend a plugin that will limit it to 3 players with the same ip to join, also maybe blocking vpn's if possible. let me know

and which plugin

Yep 3 players is fine most house holds have 1-2 computers or so, that the kids-only will use, then there's teenagers with like 1-5 per household/kid.
But yes, 3 players per ip, is fine.

 

[Timed]

Yep 3 players is fine most house holds have 1-2 computers or so, that the kids-only will use, then there's teenagers with like 1-5 per household/kid.
But yes, 3 players per ip, is fine.

you have a plugin name on the top of your head? or search words?

 

[Latouth]

you have a plugin name on the top of your head? or search words?

Uhm....
ChatControl has an antibot function....
And I've heard AltsRevealer is pretty good at finding alt accounts, and limits connections per ips.