[REQ] [URGENT(anti-exploit)] Relogin limiter...

My server was down three times in the last week it's been up because of a mysterious error and today I think I suspect I have found why... spam relogging.

First thing we noticed, was chat was spammed by player logged in and player logged out messages...

Then I got these errors....

Code:

2011-12-10 19:29:36 [WARNING] class net.minecraft.server.NetServerHandler wasn't prepared to deal with a class net.minecraft.server.Packet1Login

Code:

2011-12-10 19:29:46 [SEVERE] [LogBlock Consumer] SQL exception on UPDATE `lb-players` SET onlinetime = ADDTIME(onlinetime, TIMEDIFF(FROM_UNIXTIME(1323563375), lastlogin)) WHERE playerid = 1585;:
com.mysql.jdbc.MysqlDataTruncation: Data truncation: Truncated incorrect time value: '839:09:22'
        at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3591)
        at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3525)
        at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:1986)
        at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2140)
        at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2620)
        at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2570)
        at com.mysql.jdbc.StatementImpl.execute(StatementImpl.java:779)
        at com.mysql.jdbc.StatementImpl.execute(StatementImpl.java:622)
        at de.diddiz.LogBlock.Consumer.run(Consumer.java:276)
        at org.bukkit.craftbukkit.scheduler.CraftWorker.run(CraftWorker.java:34)
        at java.lang.Thread.run(Thread.java:722)
2011-12-10 19:29:46 [INFO] playernameofgriefer [/65.26.56.49:50264] logged in with entity id 6230374 at ([world] -636.9794230480691, 121.0, -354.01014370471137)
2011-12-10 19:29:46 [INFO] [WebAuction] Player found, canBuy: 1 canSell: 1 isAdmin: 0
2011-12-10 19:29:52 [INFO] [LogBlock Consumer] Queue overloaded. Size: 2206

and finally... the error I'd seen earlier...

Code:

2011-12-11 03:22:15 [SEVERE] java.net.SocketException: Too many open files
2011-12-11 03:22:15 [SEVERE]    at java.net.PlainSocketImpl.socketAccept(Native Method)
2011-12-11 03:22:15 [SEVERE]    at java.net.AbstractPlainSocketImpl.accept(AbstractPlainSocketImpl.java:396)
2011-12-11 03:22:15 [SEVERE]    at java.net.ServerSocket.implAccept(ServerSocket.java:522)
2011-12-11 03:22:15 [SEVERE]    at java.net.ServerSocket.accept(ServerSocket.java:490)
2011-12-11 03:22:15 [SEVERE]    at net.minecraft.server.NetworkAcceptThread.run(SourceFile:35)

So, anyone up for the task? I surely hope so.

PS... in a few hours my server.log grows to dozens of GB in size on the hard drive...

Does anyone care to find/make a fix? This exploit crashes a server and will after a day fill a 500GB hard drive because of the size of the log file...

EDIT by Moderator: merged posts, please use the edit button instead of double posting.

 

Couldn't you just ban the players that are doing it?

 

if you happen to catch them while they spam, otherwise the log file gets to be so large it's unopenable (80+gb)

Note: It seems mcbans has a login throttler. I don't trust mcbans, but I installed it just for that reason.

EDIT by Moderator: merged posts, please use the edit button instead of double posting.

 

Still interested? It´s actually not that hard. Do you want to ban people who spam the login?

 

I would love a plugin that just stops the ability to crash servers from spamming connect/disconnect packets (banning for 20 seconds someone who has connected 3+ times within 2 seconds). I had the privilege of having no bans on my server since it started 11 days ago... until someone crashed the server by spamming logins/disconnects.

In short: Yes. I would love a plugin that would prevent it because I don't want to ban anyone.

 

It seems the plugin I'm seeking is already made...
http://dev.bukkit.org/server-mods/leaverbuster/