PSA: Setting online-mode to false in server.properties will allow connections during the DDoS

Title. Just did this, worked for a server I'm hosting for myself and my brother.

This is ONLY RECOMMENDED for small servers, e.g. you and a few friends, NOT public servers, as setting online-mode to false can cause a whole mess of other problems with unauthenticated (i.e. cracked) accounts.

MODS: If this is not allowed (for whatever reason) let me know and I'll remove it.

EDIT: Apparently, if you do this on a preexisting server, you won't have your previous inventory, so this is only really useful if you don't mind starting a new server while we wait this whole thing out. Thanks u/inertia186 and u/DiscoDogo.

Posted Jul 23, 2015, 5:57 AM UTC · edited

4816
mausterio•

I don't recommend this for any server that isn't a private small server for you and your friends.

ELI5 version: Anyone can log into your server with any username they want when online-mode is set to false. Meaning someone could log in as you or the admin of the server and mess up everything real quick before you can do damage control.

29
ManWithKeyboardOP•

Yeah, pretty much. You summed it up better than I did, haha.

11
inertia186•

Not only that, but you can't have a whitelist and your previous inventory will be empty. This is because the UUID is fake when you're server is offline and it won't match with the real session UUID.

On the upside, nobody can become OP unless you add their fake UUID to the list of OPs.

4
DiscoDogo•

Yeah but if you do that wont you spawn in with nothing....I think the server will make a new profile for you as a blank character. Not really useful for those who want to continue playing as usual.

6
ManWithKeyboardOP•

I'm not sure. We just started a server today, so I can't say for certain how it'll affect preexisting worlds.

3
randomlypickedname•

I ended up making a copy of my old player.dat and renaming it what the new one was called... only ran into an issue with my private tesseracts so far.

Edit: Got through with it set to true, now I get to delete what got copied over... Oh well.

2
Ohnana_•

I've successfully done it on a small, preexisting server. We spawned without most of our stuff (interestingly enough the Baubles+botania mod still spawned active effects...) And then when we had internet connection again and put the server into online mode, everything was back to normal. Just be sure to empty your inventory every time you log off!

My server was on a private LAN, so i didn't have griefing problems.

2
Morteos•

Is there anyway to do something like this for a LAN game?

2
ManWithKeyboardOP•

You shouldn't have to change anything other than server-properties for a LAN game, afaik. All it's doing is bypassing the authentication step it normally does.

1
radyjko•

I think LAN game is permanently set on offline mode. In other words you don't have to

1
madrockets•

Are realms still offline? - if so is there a fix like this for realms?

1
leonissenbaum•

Its getting ddosed? by who? I thought it was just down for matiance.

1
PMMeYourPJs•

The ddosing was several hours (over 6 before I went to bed) yesterday. There is no issue right now. Someone took credit for it via twitter but the account was taken down. No one important that you would recognise, probably some kid with his parent's credit card.

3
leonissenbaum•

Alright, thanks.

0
BellLabs•

Here's the thing. If the login servers go down, your email is interpreted as a username for those on a Mojang account. That WILL result in your items being in your other account. However, if you do NOT have a Mojang account, you will almost certainly be fine.

1
[deleted]•

[deleted]

0