#Someone can bypass bans, and whitelist

82 messages · Page 1 of 1 (latest)

deft pine
#

SOMEHOW, a player by the name of "JohnPC" can bypass whitelist, bans, and mutes. He can also spawn in illegal items. He is banned with regular minecraft, essentials, and my own punishment system, he is not opped, has no permissions, or anything. No plugins are injected with any backdoor. I am genuinely confused and probably need to contact support, if anyone knows tell me please.

mellow cedar
#

Is this a proxy connected to an external server hosted outside of Minehut?

deft pine
mellow cedar
#

It sounds like your UUID forwarding might not be working, or your server is in offline mode with no protection so users are able to spoof UUIDs

deft pine
mellow cedar
#

Are you using one of the older proxy external servers, or the new external server plan?

deft pine
#

something changed?

mellow cedar
#

Yeah, I can get you a link to the documentation, one moment

deft pine
#

I have the uh

#

Old one

#

MH20 is less than External, what is the point of "External"?

deft pine
mellow cedar
#

The external plan is a tunnel, so instead of hosting your proxy on Minehut, you would have a tunnel that points to your proxy or server hosted externally. So it's basically just a connection from Minehut to you.

#

For the older method though, what proxy type are you using? Velocity?

deft pine
mellow cedar
#

How many servers do you have attached to the proxy?

deft pine
mellow cedar
#

Are you using Paper on all of them?

deft pine
mellow cedar
#

Are all 4 of your servers in offline mode?

deft pine
mellow cedar
#

What type of forwarding are you using in your external_servers.json file?

deft pine
mellow cedar
#

Does the secret in the file match the secrets on your 4 servers?

deft pine
mellow cedar
#

What version of Minecraft are your 4 servers?

deft pine
mellow cedar
#

Are these settings set to the following on all 4 of your servers?:

proxies
  velocity:
    enabled: true
    online-mode: true
deft pine
mellow cedar
#

Do you use any velocity plugins?

deft pine
#

wait

#

what is bStats

mellow cedar
#

That's an analytics plugin that's built into Velocity and Paper, no worries about that

#

When you ban this user, does their UUID change each time you ban them?

deft pine
mellow cedar
#

You can check the UUID by looking at your console logs when the player joins the server, or checking your banned-players.json file on your server

deft pine
#

44d43466-1a13-462d-a8cf-cbf2ff94f916 (banned players)
[03:39:20 INFO]: UUID of player JohnPC is 44d43466-1a13-462d-a8cf-cbf2ff94f916

mellow cedar
#

Does it change when they come back and you ban them multiple times?

deft pine
mellow cedar
#

They're still able to login?

deft pine
#

They were able to not that long ago

#

Like 5 minutes before I made the thread

#

they were already on banned players

mellow cedar
#

So they were playing on the server, and you tried to ban them, and it said they were already banned even though they were still online?

deft pine
#

also another user "FatBlack" Who should already be minehut banned per the rule of no discriminatory player names

deft pine
#

He was not in the Tab list but for how many players were on it was 1 more than in tab list

mellow cedar
#

What kind of items were they spawning in? Like did they have creative mode or were they using /give or something?

deft pine
#

Somehow they gained creative access (without issuing a command!) and got them from a toolbar or something

#

I dont know how else this player would have done it

#

Also

mellow cedar
#

There's definitely something wrong on the server if they were able to gain creative mode, that's impossible without a backdoor or an improperly configured server

deft pine
#

he made his max health 2048

deft pine
#

Spoofing your UUID to ban evade is against minehut rules still though right?

mellow cedar
#

I would also suggest reviewing every single one of your plugins, maybe even download fresh copies from Spigot and replace the JARs

deft pine
mellow cedar
#

It doesn't sound like they're spoofing UUID based on what you've said, if the UUID isn't changing when you ban them then it's not that

deft pine
#

I just use this server called "Xan TheProtection" Which scans for backdoor

deft pine
mellow cedar
#

Community disruption is against the rules, yeah. You're on an external server though, so we wouldn't be able to review your server logs unfortunately to validate that.

deft pine
#

latest.log must be able to show something that I am not seeing?

mellow cedar
#

I suggest reviewing your plugins first and foremost, I suspect that's where the issue is

deft pine
mellow cedar
deft pine
mellow cedar
#

I would also suggest downloading brand new, fresh copies of each and every plugin JAR file and then reuploading them back to the server to ensure they haven't been tampered with

deft pine
#

nevermind lol should have read

mellow cedar
#

I also suggest checking out the download count on any plugins you download, if it's a low download count, that means not many users are using it so you should be a bit more cautious about using it

deft pine
mellow cedar
#

Are you doing this on a linux server or your own Windows PC?

deft pine
mellow cedar
#

It would depend on your external host, I'm not quite sure

deft pine
mellow cedar
#

You could also download the plugins to your own PC and scan them there using Command Prompt

deft pine
#

just a pterodactyl shell