search

BlackDemonZyT / BotSentry

Official repository for Bot-Sentry issues, information, etc..
5 stars 0 forks source link

BotSentry Suggestion #106

Open xXGamerHDXTv opened 1 year ago

xXGamerHDXTv commented 1 year ago

Hello There

I have a suggestion for the plugin, it might be good if staff members get a notification when a player tries to join the network with a VPN/proxy, Below I have linked a screenshot of what this could look like as an example.

⇒ https://ibb.co/QH7zqXv

Another thing would be players being kicked directly if they try to join the server with a VPN/proxy, instead of letting them join the network and then kicking them.

In the end there would be one more thing and that is I think I found a VPN that is able to bypass the plugin, at least I think that. The VPN name is Mysterium VPN I'm not sure if you can block this VPN because it's a peer to peer VPN, however, the plugin also blocks VPNGate and this VPN is also a peer to peer VPN as far as I know.

Link to Mysterium: https://www.mysteriumvpn.com/

Linked below is an example IP of the VPN, it is not blocked by the plugin by default which can be checked using /bs scan and the IP address.

⇒ https://ibb.co/pzgWgrN

IPQualityScore Check: https://ibb.co/3WQvk1r

Thanks for the extremely good plugin and the opportunity to make suggestions for the plugin and also for the Help.

With kind Regards. xXGamerHDX

Laurenshup commented 1 year ago
  1. That message is definitely possible.
  2. Not sure if I can "delay" joins as checking does not work immediately. Or I immediately kick those players.
  3. Do you know what their IP-ranges are?
xXGamerHDXTv commented 1 year ago

Unfortunately no since I don't have the VPN and don't know that in general I only got this screenshot once, and I checked several IPS with the plugin it can't detect this VPN from what I've seen.

⇒ https://ibb.co/Nszvcrk

And I have this Link, not sure if this can help.

⇒ https://www.mysteriumvpn.com/post/what-is-residential-vpn

jonesdevelopment commented 1 year ago

I don't think any admin wants their chat flooded with huge notifications whenever someone attacks the server.

xXGamerHDXTv commented 1 year ago

It's not about getting a notification when your server gets attacked, it's about getting a notification for staff members when a player tries to join the network with a VPN/proxy. Maybe the Admins/Server Owners should be given the option to turn these VPN alerts off or on in the config or by using a command ingame.

You could implement the following in the config

VPN notifications:

Description: All staff members will receive a notification as soon as a player tries to join the network with a VPN/proxy (requires XYZ permission to see the alerts)

VPN Alerts True = Staff Members with X Permission will get these alerts

False = No Staff Member/Admin will get alerts when a player tries to join with a VPN. (Regardless of whether X permission is set or not.)

Server Owners/Admins who want to use this function can use it, and server owners who don't want it can set the value to false and then just don't use this function.

Maybe the Devs could also add an AutoBan system if players try to join the server with a VPN, they will be automatically banned after X attempts. Of course, you should also be able to switch this function on or off in the config.

Draghonir commented 1 year ago

I would like to request that users who join my Minecraft server with a VPN be immediately kicked instead of having time to create an account. The use of VPNs can often lead to security concerns and disruptive behavior, and I want to ensure a safer and more enjoyable environment for all players. By implementing this measure, we can prevent potential issues and maintain the integrity of the server.

Laurenshup commented 11 months ago

I would like to request that users who join my Minecraft server with a VPN be immediately kicked instead of having time to create an account. The use of VPNs can often lead to security concerns and disruptive behavior, and I want to ensure a safer and more enjoyable environment for all players. By implementing this measure, we can prevent potential issues and maintain the integrity of the server.

Although I completely agree with this, it is not fully feasable to delay connections in order to wait for the actual data to be retrieved by the server. I can look into it, but I am not sure if this is really good to do.

Laurenshup commented 5 months ago

For small servers it could be feasible to send messages, but I am not implementing this, as it could be very distrubing when there are attacks. Even when this is toggleable, during attacks this wouldn't be good. Also, what would be the benefit for the admin? For the future it could be done.

Delaying joins is not something that is currently to be scheduled, as this is quite bad behavior to do so. It would delay joins by over 3 seconds on average. Also this might come in the future, when there are better options available.