PSA: Setting online-mode to false in server.properties will allow connections during the DDoS
Title. Just did this, worked for a server I'm hosting for myself and my brother.
This is ONLY RECOMMENDED for small servers, e.g. you and a few friends, NOT public servers, as setting online-mode to false can cause a whole mess of other problems with unauthenticated (i.e. cracked) accounts.
MODS: If this is not allowed (for whatever reason) let me know and I'll remove it.
EDIT: Apparently, if you do this on a preexisting server, you won't have your previous inventory, so this is only really useful if you don't mind starting a new server while we wait this whole thing out. Thanks u/inertia186 and u/DiscoDogo.
Posted Jul 23, 2015, 5:57 AM UTC · edited
I don't recommend this for any server that isn't a private small server for you and your friends.
ELI5 version: Anyone can log into your server with any username they want when online-mode is set to false. Meaning someone could log in as you or the admin of the server and mess up everything real quick before you can do damage control.
Yeah, pretty much. You summed it up better than I did, haha.
Not only that, but you can't have a whitelist and your previous inventory will be empty. This is because the UUID is fake when you're server is offline and it won't match with the real session UUID.
On the upside, nobody can become OP unless you add their fake UUID to the list of OPs.