BungeecordExploitFix

Bungeecord Exploit fix

What is this plugin?
This plugin is made for bungeecord server networks running on multiple or single rootservers and allows your players to join only if they are using bungeecord to connect to your bukkit / spigot server. Griefers or hackers scan your rootserver to find open ports which can be used to join directly on the spigot server. These servers are running in offline-mode=false what causes the actual problem: people can login using your minecraft name and propably they will have all permissions. Thats not what an admin want.

Installation tutorial starts at 4:28

How does it work? Installation instructions
Install this plugin on every spigot server which is part in your bungeecord network and edit the kick message which appears to a player who tries to join using an inoffical port.

config.yml:

Bungeecordexploitfix:
allowedips:

- 127.0.0.1
- 123.456.789 (the ip of your root server; enable this only if you are not able to join using the default configuration. If you can not join the server using your domain add the ip which is shown in the kick message)

kickmessage: '&c&lError: &r&7the ip %IP% is blocked by the server to avoid a bug.'

If you need support
you can contact me via conversations, via Twitter https://www.twitter.com/realthepn_
or join our teamspeak-3 server: thepn.me

Please leave feedback or suggestions!
Thank you