New to BungeeCord - Security

Discussion in 'BungeeCord Discussion' started by effortless, Jun 13, 2013.

  1. Hey guys,

    Just finished setting up BungeeCord, and migrating everything over to MySQL to run across the servers.

    Just a couple of things I'm concerned about with running this:

    • We've run McBans for a long time, about 5000 bans, is there something available that is compatible with this?
    • Having individual servers as offline-mode, but having them connectable via DNS causes a major issue, can they not log in as any name?
    Just looking to tighten up the servers before they go live, any help appreciated with this,
    Thanks
     
  2. LiLChris

    LiLChris Retired Moderator
    Retired

    You are not giving your players the direct port to your back end servers.
    Just give them the Bungeecord IP (port if its not default or use SRV) that way they can not log on as an offline player.

    Several ways to lock it down, check the guide/wiki. ;)
     
  3. Am I reading it wrong then that forced_hosts allows direct connectable to individual servers?

    Concerned about being completely reliant on 1 IP of 5 being available that could potentially knock all of them out, right? What happens when BungeeCord goes down, do the players stay connected?
     
  4. LiLChris

    LiLChris Retired Moderator
    Retired

    No if Bungeecord goes down, you cut off the pipe to the servers.

    Ignore forced_hosts for now, that is a more advanced feature used to direct users to the correct IP.