please whitelist your servers

Hi,

A lot of mods don't validate server-bound packets properly. A maliciously modified client might lie to the server about something, and if it doesn't check if that is true, then what you see here might happen to your server.

I reported this problem to the devs of aeronautics a month ago and also provided them with a fix.

The lie I told the server:

I have a spring in my hand and want to place a spring connection from the topmost layer of the chunk to the block below, and I promise both blocks are not currently occupied by another block.

The server checks my dimension; I can only place them in the nether if I'm in the nether.

The server checks if the beginning and the end of the spring are close together.

The server checks if I have a spring in my main hand (btw, for this big area clear I need at least 2 in my hand).

The server doesn't check if I'm close to where I want to place these springs. I could build them at the world border, replace the bedrock layer, or just in the chunk I'm in.

The server doesn't check if the blocks are actually air and just places the spring there.

The server only removes a spring from my inventory if both ends of the spring are new. I lied to the server that I wanted to create a spring connection from a place where a spring was already placed to a block that I wanted to void. As the server checks if I have a spring and then does all of this before removing the spring, I need exactly 2 in my inventory.

Modders create mods in their free time to have fun; some of us didn't have a proper education about this kind of stuff.

It's not their fault nor their biggest priority.

I understand that.

I hope you do too.

You are maybe playing with hundreds of mods, maybe thousands of packets with improper validation.

Please use a whitelist.

Please create backups.

Please have fun.

Big thank you to the aeronautics team for creating these mods. Y'all are amazing.