Anti-VPN & WARP Evasion Guard
Bade Minecraft networks par sabse badi problem hoti hai players ka Cloudflare WARP (1.1.1.1) ya VPN use karke bans evade karna. Cloudflare ke shared IPs (104.28.x.x) hazaro mobile aur PC users share karte hain, isliye galat IP ban lagane se innocent players bhi ban ho jate hain.
BharatMC Login ise Dual-Layer Registration Trap aur CIDR range whitelist ke zariye solve karta hai.
🛡️ Anti-Ban Evasion SOP (Staff Rulebook)
1. Sabse Bada Niyam: WARP IP Par KABHI BHI /ban-ip Mat Lagao
- Agar staff ne Cloudflare WARP IP (
104.28.0.0/14ya8.29.230.0/23) par/ban-iplagaya, toh uss same node ke hazaro masoom players lock out ho jayenge. - Action: Hamesha pehle standard UUID Account Ban (
/ban <player>) use karo.
2. WARP Ban-Evaders Kaise Trap Hote Hain?
Jab koi banned player Cloudflare WARP connect karke wapas aane ki koshish karta hai:
- Existing Account Blocked: Banned username/UUID block rehta hai chahe WARP koi bhi IP assign kare.
- Alt Account Registration Trap:
- Banned player naya alt account register karne ke liye
/registertry karega. antivpn.ymlmeallow-cloudflare-registration: falseset hone ki wajah se proxy registration ko turant reject kar deta hai:✕ REGISTRATION RESTRICTEDYou cannot register a new account while using a VPN, WARP, or Proxy.Please disconnect from your VPN/WARP and register directly.
- Banned player naya alt account register karne ke liye
- The Trap: Naya alt banane ke liye usko WARP band karna hi padega. Aur jaise hi wo WARP band karega, uska Real Residential ISP IP expose ho jayega aur previous IP-ban se block ho jayega!
3. Account-Chaining & Registration IP Check (/dupeip)
- Velocity proxy par
/dupeip <player>run karke check karo ki uss IP se kitne alts bane hain. - Database (
users.first_address) check karo jo player ka original registration IP save rakhta hai.
⚙️ Complete Configuration: antivpn.yml
# ==============================================================================
# BHARATMC ANTI-VPN & PROXY SYSTEM
# ==============================================================================
# Standalone configuration for Anti-VPN / Proxy detection and bypass controls.
# Toggle the entire system on/off directly from this file or via /forceantivpn.
# Changes can be reloaded on the fly using /forceantivpn reload or /bl reload.
# Master switch: Set to false to completely disable Anti-VPN and Proxy checks
enabled: true
# Kick message shown when a player connects using a detected VPN or proxy
kick-message: "<gradient:#FF416C:#FF4B2B>✕ VPN / PROXY DETECTED</gradient>\n\n<white>Please disconnect from your VPN or proxy to play on BharatMC.</white>\n\n<gray>If you believe this is a mistake, please reach out to our team on Discord:</gray>\n<gradient:#00C9FF:#92FE9D>discord.gg/bharatmc</gradient>"
# Registration Protection:
# When true, /register will strictly reject players connecting through ANY VPN or Proxy,
# preventing malicious users from creating infinite alt accounts by switching VPN locations.
# Existing accounts can still be allowed to /login with VPN if prelogin checks are not blocking.
registration:
block-vpn: true
# Set to false so players CANNOT register new accounts over Cloudflare/WARP (prevents alt-account spam).
# Once registered on their real IP, they CAN freely connect and /login with Cloudflare/WARP.
allow-cloudflare-registration: false
kick-message: "<gradient:#FF416C:#FF4B2B>✕ REGISTRATION RESTRICTED</gradient>\n\n<gray>You cannot register a new account while using a VPN, WARP, or Proxy.</gray>\n<dark_gray>Please disconnect from your VPN/WARP and register your account directly.</dark_gray>"
# Lookup service settings
# Uses blackbox.ipinfo.app (response: 'Y' for VPN/Proxy, 'N' for clean residential/mobile)
lookup:
url: "https://blackbox.ipinfo.app/lookup/{ip}"
timeout-ms: 2000
cache-days: 7
# Cloudflare & Cloudflare WARP Handling
# Cloudflare WARP and edge routing utilize Cloudflare's published IP ranges.
# Set 'whitelist-cloudflare-ranges: true' to permit Cloudflare / WARP client IPs to bypass the VPN check.
cloudflare:
whitelist-cloudflare-ranges: true
auto-fetch-latest: false
# Official Cloudflare Edge + Cloudflare 1.1.1.1 WARP Client Egress Blocks
ranges:
- "104.28.0.0/14" # Primary Cloudflare 1.1.1.1 WARP Client Egress block (104.28.0.0 - 104.31.255.255)
- "104.16.0.0/13"
- "104.24.0.0/14"
- "8.29.230.0/23" # Cloudflare WARP Asia & Global egress pool
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "108.162.192.0/18"
- "131.0.72.0/22"
- "141.101.64.0/18"
- "162.158.0.0/15"
- "172.64.0.0/13"
- "173.245.48.0/20"
- "188.114.96.0/20"
- "190.93.240.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
# Whitelisted IP addresses (Exact IP or CIDR) that always bypass the Anti-VPN check
whitelisted-ips:
- "127.0.0.1"
# Whitelisted usernames (case-insensitive) that permanently bypass all VPN checks.
# Note: You can also manage player bypasses in real-time with /forcevpnwhitelist add <player> [reason]
whitelisted-players: []
🛠️ Management Commands
| Command | Usage | Permission | Description |
|---|---|---|---|
/forceantivpn on | /forceantivpn on | bharatmc.admin | Saare proxies par Anti-VPN instantly force enforce karta hai |
/forceantivpn off | /forceantivpn off | bharatmc.admin | Anti-VPN check ko temporarily pause karta hai |
/forceantivpn reload | /forceantivpn reload | bharatmc.admin | antivpn.yml aur whitelist ko reload karta hai |
/forcevpnwhitelist add | /forcevpnwhitelist add <user> | bharatmc.admin | Kisi specific player ko whitelist me add karta hai |