5 ms·

run a Digital Ocean droplet hosting the server? It's up to you if the costs justify the benefits.

cube00 5y ago
This why I've given up and just pay to host anything external to scratch my self hosting itch. If they somehow manage to get in at least they won't be roaming around inside my home network. The flood of failed auth attempts and weird looking strings being sent to my web server is never ending. It might be something worth reconsidering once the world is on IPv6 and we have proper subnetting we can use at home.
- iso1631 5y ago
  > If they somehow manage to get in at least they won't be roaming around inside my home network. Why would you have such a server on your home network and not in a DMZ?
- charcircuit 5y ago
  Why would IPv6 make a difference? Addresses aren't private information and they aren't given out randomly.
  - orangepurple 5y ago
    It's easy to traverse the entire IPv4 space by brute force. Not so with IPv6
    - charcircuit 5y ago
      It only takes visiting one site / using one app to have your ipv6 leaked and added to a database of ips that should be scanned.
- omnicognate 5y ago
  Nothing I self-host on my home network is exposed to the public internet. I use Wireguard to access the home network remotely.
  - cube00 5y ago
    Unfortunately that's not an option for me because I host a mail server which needs port 25 open to the world.
- raverbashing 5y ago
  Yes, every exposed webserver needs a heavy firewall and WAP/fail2ban/etc enabled? Oh you tried to access wpadmin.php? IP gets banned. Too many failed ssh attempts? Banned. Tried to connect to mysql/postgresql? Not running but banned regardless.
- NavinF 5y ago
  > If they somehow manage to get in at least they won't be roaming around inside my home network. I mean if that’s your only concern, it’s pretty easy to run Minecraft in a docker container that’s only allowed to accept inbound connections and to make outbound connections to the internet (or more specifically to the Mojang auth server)
  - BrazzVuvuzela 5y ago
    > to make outbound connections to the internet (or more specifically to the Mojang auth server) I believe you can forgo even that; a vanilla server jar can be configured to run in "cracked" mode by setting 'online-mode' to false in server.properties. Skins won't work though, players will have steve/alex skins. It's documented on the no-longer-official wiki here: > online-mode - Server checks connecting players against Minecraft account database. Set this to false only if the player's server is not connected to the Internet. Hackers with fake accounts can connect if this is set to false! If minecraft.net is down or inaccessible, no players can connect if this is set to true. Setting this variable to off purposely is called "cracking" a server, and servers that are present with online mode off are called "cracked" servers, allowing players with unlicensed copies of Minecraft to join. https://minecraft.fandom.com/wiki/Server.properties https://minecraft.fandom.com/wiki/Server.properties
    - deleted 5y ago
      [deleted]
    - NavinF 5y ago
      Oh I didn’t know that worked on the official server binary. I remember having to use the mineshafter client and having to play on cracked servers ~12 years ago when I had no way to pay for stuff as a kid. I also tried running a cracked server at home, but banned users could find new IPs faster than I could ban them :( I guess this is still viable if you know everyone on the server and use a server plugin to auth.
  - contravariant 5y ago
    Not sure I'd feel safe hosting a docker container running malicious code.

This why I've given up and just pay to host anything external to scratch my self hosting itch. If they somehow manage to get in at least they won't be roaming around inside my home network. The flood of failed auth attempts and weird looking strings being sent to my web server is never ending. It might be something worth reconsidering once the world is on IPv6 and we have proper subnetting we can use at home.

iso1631 5y ago
> If they somehow manage to get in at least they won't be roaming around inside my home network. Why would you have such a server on your home network and not in a DMZ?
charcircuit 5y ago
Why would IPv6 make a difference? Addresses aren't private information and they aren't given out randomly.
- orangepurple 5y ago
  It's easy to traverse the entire IPv4 space by brute force. Not so with IPv6
  - charcircuit 5y ago
    It only takes visiting one site / using one app to have your ipv6 leaked and added to a database of ips that should be scanned.
omnicognate 5y ago
Nothing I self-host on my home network is exposed to the public internet. I use Wireguard to access the home network remotely.
- cube00 5y ago
  Unfortunately that's not an option for me because I host a mail server which needs port 25 open to the world.
raverbashing 5y ago
Yes, every exposed webserver needs a heavy firewall and WAP/fail2ban/etc enabled? Oh you tried to access wpadmin.php? IP gets banned. Too many failed ssh attempts? Banned. Tried to connect to mysql/postgresql? Not running but banned regardless.
NavinF 5y ago
> If they somehow manage to get in at least they won't be roaming around inside my home network. I mean if that’s your only concern, it’s pretty easy to run Minecraft in a docker container that’s only allowed to accept inbound connections and to make outbound connections to the internet (or more specifically to the Mojang auth server)
- BrazzVuvuzela 5y ago
  > to make outbound connections to the internet (or more specifically to the Mojang auth server) I believe you can forgo even that; a vanilla server jar can be configured to run in "cracked" mode by setting 'online-mode' to false in server.properties. Skins won't work though, players will have steve/alex skins. It's documented on the no-longer-official wiki here: > online-mode - Server checks connecting players against Minecraft account database. Set this to false only if the player's server is not connected to the Internet. Hackers with fake accounts can connect if this is set to false! If minecraft.net is down or inaccessible, no players can connect if this is set to true. Setting this variable to off purposely is called "cracking" a server, and servers that are present with online mode off are called "cracked" servers, allowing players with unlicensed copies of Minecraft to join. https://minecraft.fandom.com/wiki/Server.properties https://minecraft.fandom.com/wiki/Server.properties
  - deleted 5y ago
    [deleted]
  - NavinF 5y ago
    Oh I didn’t know that worked on the official server binary. I remember having to use the mineshafter client and having to play on cracked servers ~12 years ago when I had no way to pay for stuff as a kid. I also tried running a cracked server at home, but banned users could find new IPs faster than I could ban them :( I guess this is still viable if you know everyone on the server and use a server plugin to auth.
- contravariant 5y ago
  Not sure I'd feel safe hosting a docker container running malicious code.