So I just got home from the movies and my moderators jumped on me about a wave of around 20 spammers who came by earlier and were banned. Now I look at the console and I see CONSTANT connection attempts from these players who were banned. Like two connection attempts per second. I'm assuming this is some sort of automated process since nobody can switch accounts and try to log in that fast... let alone not giving up after making it clear that you're banned. This isn't affecting my server, I don't think, but it's still annoying. Is there a way to ban all of those IP's at the router level so they don't bog up Bukkit? I have a DD-WRT router but I have no idea how to work that iptables thing... Anyone here know? Thanks!
This isn't quite the fix you're going for, but you could turn up your connection throttle in Bukkit.yml to prevent frequent log in attempts
I once saw a client which was able to do this. Login over 200 players at one time, and they would start spamming...
You can 100% prevent login/logout flooding and chat spam with a plugin like GriefPrevention, which will help. For DDOS-style attacks, though, there's nothing a plugin can do. In that case, you have to go outside of Minecraft (like to your router firewall settings as you mentioned). It's because of problems like these that I'm a big fan of having your server hosted, so that you have networking professionals to handle problems like this (who are usually available 24/7) so that you don't have to, and you can focus entirely on what happens IN your server. I use BeastNode. They're quick to respond to tickets, proven effective (based on my personal experience) in stopping both simple DDOS and BotNet attacks, and only charge about 15 per month per gig of ram.
Yeah I've tried that before, but the cheap ones suck (oversold VPS's with tons of lag) and the good ones are too expensive. But then, Comcast did just double my internet bill (lol at their stupid 6 month introductory pricing) so I'll consider something like this BeastNode. Thanks!
