basic antibot system

[sergivb01]

• [x] Ratelimit (20968397221fa629c270717f84d0993b8176cc76, 17285b077ca98d42f0dfaa8bd69b37764d609892)
• [X] Chat/Command too fast -> kick (f21bae182eaf36e9710b6488ba7ea13d7ffecb13)
• [ ] Captcha (click text in book) for new users
• [ ] Captcha on /register <password> <password> <captcha>
• [ ] VPN/Proxycheck
• [ ] Geolocation
• [ ] Auto-whitelist IP addresses (>3m playtime)
• [ ] Whitelist/blacklist - redis + ipset (pull data from redis every 30s into ipset)
• [ ] Username regex
• [ ] Check for the "settings" packet
• [ ] Limbo server?

Integrate with IPTables and IPSet

[puttydotexe]

/^\w{3,16}$/i is the valid regex for Minecraft account usernames. Including size limit and allowed chars.

[puttydotexe]

Found an intresting framework/method of manipulating IPTables without much aids. It can be found here.

[sergivb01]

/^\w{3,16}$/i is the valid regex for Minecraft account usernames. Including size limit and allowed chars.

More strict regexp: https://github.com/sergivb01/Toastr/blob/2f31d4fb6914183cbcfd56ffca07724392de8e68/src/main/java/dev/sergivos/toastr/listeners/AuthListener.java#L39

I'm looking more into adding something such as the following, which can protect from many bots using the default settings https://github.com/2LStudios-MC/AntiBot/blob/5acce83b18591a8399bf3c8fc4e0bb003cea9579/src/twolovers/antibot/bungee/module/NicknameModule.java#L15