NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted Oct 21, 2015@MrBeefchop
Which version of NCP ?
Latest development builds still need fixes, are you on the latest recommended for 1.8 (build 853) ?
-
View User Profile
-
Send Message
Posted Oct 21, 2015By jumping on Slimeblocks the Plugin always say to Players. Survival Fly!
-
View User Profile
-
Send Message
Posted Oct 21, 2015@groovybluedog
Which version of NCP have you been testing? Which server/Minecraft version with?
-
View User Profile
-
Send Message
Posted Oct 20, 2015@bigscary
Thank you for the feedback.
Concerning the water, that should be a ticket, i assume that the issue persists on the latest builds for most. I'll try to reproduce...
The config part is a bit difficult, the complaint is generated only if we change an existing value, of course it doesn't really justify resetting the whole config. For one way to deal with it, see the answer by @Bobcat00. In fact this is somewhat queued already, but it's not of high priority, compared to stabilizing moving checks and reinstating/improving fight checks. We have been thinking about either marking config changes per-path, thus logging exactly what changed, or at least allowing to show the differences to the default configuration via a commands somehow.
@nsptg95
CompatNoCheatPlus is EXTRA to NCP. It might detect NPCs (note NPC vs. NCP :p), and it might exempt them from checks in order to decrease server load. This could help a little bit.
I'd need to inspect the timings when i have time (...), at first glance it looks like those have been taken over a very short duration of time - do you have timings covering a little longer period of time, or say something like 200000 - 2000000 moving events?
@Bobcat00
That's probably the best you can do at present :).
-
View User Profile
-
Send Message
Posted Oct 20, 2015@bigscary
I shut down the server, rename the config, update NCP, restart the server, then use Notepad+ +'s compare files feature to check and update the new config file.
-
View User Profile
-
Send Message
Posted Oct 20, 2015@asofold
hello,
no, i dont try use compactNoCheatPlus, but this anti cheat is equals ncp?
see timings https://goo.gl/LgQk1V see timings in log: http://pastebin.com/5NShestX
-
View User Profile
-
Send Message
Posted Oct 20, 2015Bug Report on version 3.1.2.1-SNAPSHOT-sMD5NET-b854. When players throw an ender pearl and it hits the side of a block under water, they get kicked and then every time they log back in, they're instantly kicked again. This requires me to give them the bypass permission to get them out. I'm betting I've lost lots of players due to this, because not being able to log into the game makes it difficult to contact an admin. And even if you do, you still have to wait for an admin to act. For me anyway, it's too expensive to keep around - so I've turned off the passable check (the logs explained that was the reason for the boots).
Feature request - Please stop insisting we reset our config files every time we update. Your config file is super-complicated, and meticulously noting the customizations and then re-applying them to a new config file after every update is frustrating - so much so that for me, I just ignore the log in message reminding me to regenerate the file. Even though I see it every time I log in (and have for months now), it's still less troublesome than trying to re-customize a config file.
Thanks for the great plugin! As much as I complain about disappointments, I wouldn't trust anything else. I know it must be very difficult to balance efficacy versus false positives, especially with the moving target created by client mod developers.
-
View User Profile
-
Send Message
Posted Oct 20, 2015@nsptg95
You already turned logging off, that's something. Without seeing the absolute timings or the relation to the server tick, i can't say much.
Have you ever tried CompatNoCheatPlus with Citizens?
-
View User Profile
-
Send Message
Posted Oct 18, 2015@asofold
version 1.7.2 - 1.7.5
-
View User Profile
-
Send Message
Posted Oct 17, 2015@nsptg95
What was your server /version?
-
View User Profile
-
Send Message
Posted Oct 17, 2015@asofold
humm thanks, i go send my ncp config: http://pastebin.com/JNx8WjZa
maybe how you recomend i do?
thanks :b
-
View User Profile
-
Send Message
Posted Oct 16, 2015@nsptg95
I don't see the problem yet :).
1. This is 40% of plugin load, not server load. WorldGuard is "10%" off that value. 2. What is your server version? 3.11.1 is quite a lot outdated. 3. You can reduce logging (turn off console logging, or ingame logging, depending on what you really need, file logging should be best to keep). 4. You might use CompatNoCheatPlus alongside with citizens, otherwise NPCs might create even more load.
Permission checking seems to create a lot of load, perhaps we will add caching, in order to cut down the checking time (on one profiling go, we had moving checks have 50 % overhead due to permission checking (!)). The reason for taking a considerable lot of resources might be a) similar to WorldGuard checking a lot of things including all players moving (more than WorldGuard has to), and b) perhaps NCP is running in an inefficient mode/setup, e.g. NCP 3.11.1 with MC 1.8.x or all logging enabled on a bigger server.
Essentially there is the question if your server has performance problems that way at all - NCP has been designed to take about 3% or max. 5% of total load in average, scaling with server performance - so absolute timing values or relative to the full server load would be more interesting.
-
View User Profile
-
Send Message
Posted Oct 16, 2015Hello, i dont know why this but, no cheat plus use 40% of my server total,
timings: https://goo.gl/zUyqa9
my no cheat plus version is: 3.11.1
have solution?
sorry for my bad english and thanks for help
-
View User Profile
-
Send Message
Posted Oct 15, 2015@Schneidertm
What do you mean with 'bypass'?
Technically NCP just sets the "you don't have permission" message for the unknown command part.
Only in the case that the command did not have any permissions set, NCP will set one. The root permission for all would be nocheatplus.filter.command , and for a specific command, say 'spawncreepers', you would have the lower case command name appended, like nocheatplus.filter.command.spawncreepers .
Edit: Corrected permission for 'spawncreepers'.
-
View User Profile
-
Send Message
Posted Oct 15, 2015Hey,
could you please tell me the permissions node to bypass the hidden commands? (Config -> protection.plugins.hide.unknowncommand)
Thanks a lot!
-
View User Profile
-
Send Message
Posted Oct 15, 2015@Chris_GSPvP
What is the "newest" ? A development build?
NCP doesn't do anything with bubbles. It may be a cross-plugin thing.
Why are bubbles there in the first place? Have there been players with potion effects, do plugins add those? Do you have plugins adding (particle-) effects ?
What else did you update (client, server, plugins)?
-
View User Profile
-
Send Message
Posted Oct 15, 2015Since I updated to the newest NoCheatPlus I get this: http://prntscr.com/8rdmu1
-
View User Profile
-
Send Message
Posted Oct 14, 2015@Bobcat00
You don't have any cheating involved i guess?
Build 853 represents the old-style y-axis handling, just with having attempted to remove as many false positives as we could catch, before switching implementation fundamentally.
Latest builds will change y-axis handling fundamentally, alas with other false positives to iron out. we will try to pull off a recommended release within the next 7-10 days, aiming at removing the most false positives in survivalfly (new builds), and adding a replacement for fight.speed using ProtocolLib. We still have issues in the queue so i'd not switch to "latest", unless you keep track of latest tickets (to not duplicate too much) and want to help speed up wrapping up things, at the risk of new / other false positives with survivalfly. Essentially we do have a couple of actual changes queued, so likely after 3,4 builds to follow, it'll get interesting to switch.
-
View User Profile
-
Send Message
Posted Oct 13, 2015@asofold
I'm running 1.8.8 with build 853 and I get lots of nopassable and survivalfly violations. It would be nice if you could improve that part of NCP. Thanks for an incredibly useful plugin.
-
View User Profile
-
Send Message
Posted Oct 12, 2015@Chris_GSPvP
We are currently changing around a couple of things, including the default pvp behavior, so i can't really recommend anything, except maybe for testing with trusted players and adapting settings accordingly.
The version of NCP + server also make a big difference, without knowing those we can't really tell much. I assume we will have a recommended release within 1-2 weeks.