SecuredNetwork [1.7 - 1.18] - Protect your network from IP-forward bypass exploit. 3.4

A lightweight protection from IP-forward bypass exploit for your network.

  1. dejvokep
    Native Minecraft Version:
    1.18
    Tested Minecraft Versions:
    • 1.7
    • 1.8
    • 1.9
    • 1.10
    • 1.11
    • 1.12
    • 1.13
    • 1.14
    • 1.15
    • 1.16
    • 1.17
    • 1.18
    Source Code:
    https://github.com/dejvokep/secured-network
    Languages Supported:
    Translateable
    SecuredNetwork
    SecuredNetwork is a lightweight plugin protecting you from IP-forwarding bypass exploit, mainly for those who cannot access or configure their firewall systems. The plugin has been serving protection for everyone since 2019, connecting BungeeGuard (from which it took the inspiration) and the good old IP-whitelisting feature.

    [​IMG]

    What is IP-forwarding bypass?
    When using a proxy server (e.g. BungeeCord) to connect your servers together, the backend servers must run on offline mode, disabling account authentication. That enables hackers to join backend servers with your account freely.

    Each player has their own profile, which contains information about them (UUID, skin textures...). These data are given to the proxy server when a player joins and then forwarded by the proxy to backend servers. This plugin uses a passphrase, which is inserted into the player's profile and then forwarded to the backend servers to check for integrity.

    Why to use SecuredNetwork over other plugins?
    You can't go wrong with classic BungeeGuard, however, if you would also like to use the IP-whitelist, this is the way to go. The plugin also supports GeyserMC ( including Floodgate), which other plugins do not. Logs everything to the console for easy verification.

    The plugin has been downloaded 10K+ times, and (on average) is active on 300+ networks managing over 1500 backend servers.

    Setup and support
    You can view the setup instructions at the wiki. If you need help with anything, feel free join the Discord server (nonstop 24/7 support). Or, just to talk with us :)

    Licensed under Apache License 2.0.
    jrodlan, Getris, Caye and 8 others like this.

Recent Reviews

  1. DuckiiVN
    DuckiiVN
    5/5,
    Version: 3.4
    SecuredNetwork is a really good plugin that helps us protect our backend server from hackers, I highly recommend this plugin for you and your servers.
  2. Blackp45
    Blackp45
    3/5,
    Version: 3.3
    Funciona todo, menos la ip whitelist, es su gran punto malo. Su soporte igualmente es muy bueno
    1. dejvokep
      Author's Response
      I’m sorry to hear you are having troubles configuring the plugin.

      I agree that IP-whitelist might sometimes be hard to configure, as the configuration varies from user to user due to their DNS configuration.

      If using the latest version, you should have received a message in the console saying what address the player used, which should help you with a proper setup. Sometimes people need help - and that’s we are always here for you and will guide you as quick as possible.

      We really appreciate what people say about us and the support and I see your positive feedback. Thank you.

      I, unfortunately, can’t see your ticket, so I am unable to help you further. If you are interested in solving this together, make sure to create another one and let us know that it’s you.

      Alternatively, do not forget that the IP-whitelist is only a decoration and does not take part in the security aspect - you can freely disable it.

      Looking forward to hearing from you; have an awesome day :)
      ~ dejvokep
  3. LtAkmal
    LtAkmal
    5/5,
    Version: 3.3
    Well, this plugin good and i like it, very good, its worth it at all. easy setup.
  4. oscarrhxd
    oscarrhxd
    5/5,
    Version: 3.1
    It's a really good plugin, it just works. I had a problem and the developer kindly helped me.
  5. zSkynest
    zSkynest
    5/5,
    Version: 3.1
    I downloaded this plugin due to some attacks that I received previously, They did not manage to escalate the attack attempt but I wanted to make sure I have this layer of security well protected and it works very well, I did several tests testing the different IPs of my server and it just let me log in from the proxy. I highly recommend this plugin. I hope the author keeps working on this plugin to keep it always up to date, Congratulations author.
  6. SamKvKingIAl
    SamKvKingIAl
    5/5,
    Version: 3.1
    No problem: D At first I had a minor problem, but in the end it turned out to be just a small bug that support helped me solve immediately.
  7. Noiverre
    Noiverre
    5/5,
    Version: 3.0
    Don't be fooled by the lack of reviews in this plugin or the last update date. Their support team is really quick and super welcoming. I asked the author to create a custom build for my needs just yesterday, and today, he finished it and send it to me.

    This plugin can solve your problems if you don't want to use another IP/DNS blacklist out there.
  8. deltaQWERTY
    deltaQWERTY
    5/5,
    Version: 3.0
    Newest version works great, don't have to worry about griefers anymore. Thank you for making this!
  9. Zugirf
    Zugirf
    5/5,
    Version: 3.0
    The best whitelist plugin, EZ to setup and support is blazing fast!
    Thanks to the support team for replying instantly!
  10. Gustavo_kio
    Gustavo_kio
    1/5,
    Version: 3.0
    It unfortunately does not work.

    I only get this error: "result=failed, cause=incorrect_property", even using the default config.
    1. dejvokep
      Author's Response
      Sad to hear that you are experiencing problems with my plugin.

      Default configs (and the plugin as a whole) will not work if there is any incompatible plugin installed. Have you looked at the wiki? Sorry, but I can't seem to find any conversation with you, so I can't help you further.

      Assuming all the positive reviews posted by other people, it is also a form of guarantee for you, that the plugin functions properly.

      If you are interested in solving this together, please contact me trough Discord. As I care about customers (and at the end, finding what's wrong), would be glad if you do so :)

      Thank you.