How can I protect my server?

[macrochel]

How can I protect my server from bots which connect to it. I have white-list, but it doesn't help. Maybe I should change the port or something else?

[dgradecak]

hi, I am also interested in this. I have the sever accessible via a public IP and thus anyone with a TLauncher can connect easily. Also via tlaucnher (I was testing) it is also simple to change the uuid in tlauncher.

Running the server for my son and it seems some guys from "mojang loss prevention" connected somehow (probably first he disabled the whitelist and left the server without whitelist overnight), and now once the usernames are known, it seems so easy to connect to the server.

[itzg]

I just want to clarify that these are valid concerns, but this is not a challenge that it is unique to this docker image. I'm not a server hosting expert myself, so I would suggest asking around in more general forums like the official Minecraft Discord since people may not see the question here.

[dgradecak]

ok, thank you. I will do that and report back here if I find a solution.

I was hoping that there is a way to add an auth server somehow

[itzg]

You didn't set online mode to false, right? Otherwise users are already authenticated with Mojang. But again, this is nothing specific to this image.

[dgradecak]

no, since some children play with "unofficial" clients/accounts.

I just read about using discordbot and I will try with this plugin https://github.com/DenisIndenbom/DiscordAuth maybe that is a cool thing if it works

[dgradecak]

hi,
coming back to this ...

I tested the discord auth plugin (with bukkit + discord bot) and made some small fixes in order to correctly work on linux (and this docker image). I find it pretty simple to install and use, and the server is well protected. The kids can administer a private discord channel in order that every user has to click "check" whenever someone joins the mc server.

While doing this I understood that there a plenty of different mechanism to do authentication for MC with different plugins, but the discord way is pretty straight forward for the "kids gamers".

If needed, although it is pretty simple to get started, I can help on request here