Solved Can't do anything any more. Even when I have the permissions to.

Discussion in 'Bukkit Help' started by Viperdream, Apr 13, 2012.

Thread Status:
Not open for further replies.
  1. Offline

    Viperdream

    I can't teleport any more, I can't destroy blocks any more. And if any of my players move too fast, they get kicked. I also get kicked when I move.

    It still says "teleported", but I just won't move.

    I'm currently going to restart my server again with no plugins. But still I wonder what's causing this. It happened after a reload, so most likely it's because of a plugin. Even after a restart it stayed the same.

    But my staff has been reporting suspicious behaviour from a player named IceGuru. He started handing out dia blocks and somehow managed to blow holes in our farms who were worldguard protected (Yes, with the creeper explossion off)

    An admin of me also reported he was being whispered by a player, threatening the server.

    Do I just have a mole in my staff, or is it a hack client? (For the record, only I have access to the server files)

    So has anyone experienced something like this before? I could really use some help here.

    Thanks
     
  2. Offline

    andrewpo

    Plugin list and bukkit version please.
     
  3. Offline

    Viperdream

    Bukkit: 1.2.5-R1.0 - b2149jnks (MC: 1.2.5)

    Plugins:
    BoatBug, BuyCraft, SpamGuard, Vault, IWarnYou, Multiverse-Core, TreeAssist, Speedwalks, DrugMeUp, Votifier, MobDisguise, bCombatLog, NoPortal, LagMeter, MultiInv, Minequery, WorldEdit, Towny, VanishNoPacket, LogBlockQuestioner, PermissionsEX, LogBlock, Questioner, Jail, MineBackup, Telepads, MCSL, MCCasino, BKCommonLib, mcbans, Lockette, ZacAutoMessager, NoCheat, LegendaryItems, Monstersbox, qQuests, MagicTorches, HeroBounty, SellSign, ServerSigns, CommandBook, VirtualChest, MobARena, ChatManager, BOSEconomy, Worldguard, PreciousStones, Factions, HomeSpawnPlus, Register, ChestShop
     
  4. Offline

    andrewpo

    Disable these plugin(s):
    • NoCheat
    • Speedwalks
    • Telepads
    • Register
    and tell me if the issue persists or not.

    To disable, change the file suffix from .jar to .jarX - then stop your server and start it.

    Please also check your ' ops.txt ' file (ONLY make changes to it when your server is stopped) for players who aren't meant to be ops.

    Finally, provide us with a copy of your permissions YML file(s) please. Upload to pastebin.com, set the visibility/privacy of them to Unlisted and post the links here.
     
  5. Offline

    Viperdream

    I've just restarted the server without plugins and no problems any more. Going to add every plugin 1 by one now and see what it gives.
     
  6. Offline

    andrewpo

    Wow, you're one of the small fraction of people asking questions on this forum that have common sense. :) Brownie points to you.
     
  7. Offline

    Viperdream

    Thanks
    There aren't any plugins causing problems apperantly. I was wondering wether someone could hack you via letting them connect to a Minecraft server?

    Me and an Admin were invited to a server recently and it was overloaded so we couldn't join.
    It looked quite shady.

    I'm currently adding all the plugin files to see whether there's a corrupted file
     
  8. Offline

    andrewpo

    If you get people asking you to join their server to test it and you have no idea who they are, ban them from your server and don't do what they say.

    I don't know if they're trying to get into your server via a minecraft exploit but it seems suspicious nonetheless.

    Even if you get disconnected saying it's overloaded, there could still be something bad happening there.

    Were the people that tried to connect to this other server in the ops.txt file?
     
  9. Offline

    Viperdream

    Nope, only the guy who whispered us was in the ops.text file.

    He could get access to our IP that way. But I don't know how he could make us download a keylogger though.
     
  10. Offline

    andrewpo

    It wouldn't download a keylogger, they might be exploiting security holes in minecraft's authentication system to 'spoof' themselves as one of your ops and join your server.

    Or one of your ops may have run one of these fake tools which claims to look for security holes in servers but is in fact malicious.
     
  11. Offline

    Viperdream

    Hm, do you know of a fix for this? Because then I could just keep trying to fixing my server, but it will always stay futile.
     
  12. Offline

    andrewpo

    Just make sure that if you don't trust someone, they're not in your ops.txt file - even if they're your best friend, don't op them unless you know they're not going to be stupid and compromise your security.
     
  13. Offline

    Viperdream

    Strange thing is though, I've disabled OP's with PEX. So he was the only OP in the .txt file.
     
  14. Offline

    andrewpo

    Did you re-enable all plugins except:
    • NoCheat
    • Speedwalks
    • Telepads
    • Register
    ?

    + the presence of the Register plugin indicates you're running an offline server which:
    (1) Promotes piracy
    (2) Is a playground for hackers.

    For better security, buy the game and encourage your members to do the same and put your server in online mode so that players are authenticated correctly.
     
  15. Offline

    Viperdream

    I've added Registed because it came with the .zip from Towny. So I thought it was needed.
     
  16. Offline

    andrewpo

    Edit: Sorry! Register seems to be an Economy API - I had only guessed at what it did.

    I've kind of lost track of what we're aiming to achieve now.

    Check the permission nodes of this 'IceGuru' character
    if you use pex, run " /pex user IceGuru list"

    If you give me your permissions YML files, I'll check them for you.
     
  17. Offline

    Viperdream

    Code:
    allow-nether=true
    level-name=world
    enable-query=false
    allow-flight=false
    server-port=25565
    level-type=DEFAULT
    minequery-port=25566
    enable-rcon=false
    level-seed=cocacola
    server-ip=65.99.193.6
    max-build-height=256
    spawn-npcs=true
    white-list=true
    spawn-animals=true
    online-mode=true
    pvp=true
    difficulty=3
    server-name=BeastNode.com
    gamemode=0
    max-players=150
    spawn-monsters=true
    generate-structures=true
    view-distance=5
    motd=Welcome to the rest of your life
    And I'm not sure what Register is used for, I'll just remove it.
     
  18. Offline

    andrewpo

    It's an economy API - I assume Towny uses it to interact with iConomy.
     
  19. Offline

    Viperdream

    I also thought that, but wasn't it replaced with Vault? It kind of confused me when I saw it. I'm not sure whether Towny supports vault though.
     
  20. Offline

    andrewpo

    I don't use Towny - if you have an issue specific to that plugin, I suggest you ask on the relevant plugin topic or bukkitdev comments page.
     
  21. Offline

    Viperdream

    Ok, I've just added the Towny files to my server again and the problem has returned. I'm going to disable Towny now and see what it gives.
     
  22. Offline

    andrewpo

    If you get any errors, post them here.
    If you don't get errors - determine the plugin causing the issue and post in their support area.
     
  23. Offline

    Viperdream

    Thanks a lot for the suggestion!
    It was indeed Towny and Register. I'm going to report it to the dev's from Towny.
     
  24. Offline

    andrewpo

    If your issue in the Bukkit Help forum is resolved, please change the prefix of your topic title to Solved by going to Thread Tools then 'Edit Thread'
    [​IMG]
     
Thread Status:
Not open for further replies.

Share This Page