# Hostname Whitelist<\/p>\n
A simple yet powerful Velocity proxy plugin that restricts server access to
\nspecific hostnames or IP addresses. This is useful for preventing direct IP
\nconnections or enforcing the use of specific domains (e.g., `play.example.com`).<\/p>\n
## Why is this important?<\/p>\n
Malicious actors can create their own BungeeCord or Velocity proxy and forward
\nplayers to your server without their knowledge. This allows them to perform a
\n**Man-in-the-Middle (MitM) attack**, enabling them to:<\/p>\n
– Log all commands (including `\/login` and `\/register` passwords on non-premium
\n servers).
\n– Hijack player sessions (playing as the user).
\n– Execute commands on behalf of the victim.<\/p>\n
By enforcing a hostname whitelist, you ensure that players can ONLY connect via
\nyour official domain (e.g., `uwu.org.ua`), effectively blocking these malicious
\nredirects.<\/p>\n
Similar security systems are used by major servers like **DonutSMP**, **2b2t**,
\nand **Hypixel** to protect their players.<\/p>\n
## Features<\/p>\n
– **Hostname Whitelisting**: Only allow connections from specified domains or
\n IPs.
\n– **Wildcard Support**: Easily whitelist subdomains (e.g., `*.uwu.org.ua`) or IP
\n ranges (e.g., `192.168.1.*`).
\n– **Customizable Messages**: Configure the kick message shown to blocked
\n players.
\n– **Custom MOTD**: Display a specific MOTD for players pinging with an invalid
\n hostname.
\n– **Discord Webhook Logging**: Optionally log allowed and blocked connections to
\n a Discord channel.<\/p>\n
## Installation<\/p>\n
1. Download the latest release of the plugin.
\n2. Place the `.jar` file into your Velocity server’s `plugins` folder.
\n3. Restart your proxy server.<\/p>\n
## Configuration<\/p>\n
The plugin creates a configuration folder at `plugins\/hostname-whitelist\/`
\ncontaining two files: `config.yml` and `hostnames.txt`.<\/p>\n
### config.yml<\/p>\n
This file handles the general plugin settings.<\/p>\n
“`yaml
\n# Hostname Whitelist Configuration<\/p>\n
# Message shown when player connects with invalid hostname
\n# Placeholders: {hostname}
\nkick-message: “&cUnknown Server: {hostname}nn&7Please make sure you are using the correct IP”<\/p>\n
# MOTD shown for invalid hostname pings
\ninvalid-motd: “&cInvalid Hostname. Please use the correct IP address.”<\/p>\n
# Discord Webhook URL for logging connections
\n# Leave empty or set to “YOUR_WEBHOOK_URL_HERE” to disable
\ndiscord-webhook: “YOUR_WEBHOOK_URL_HERE”<\/p>\n
# Whether to log allowed connections (true\/false)
\nlog-allowed-connections: false<\/p>\n
# Whether to log denied connections (true\/false)
\nlog-denied-connections: false
\n“`<\/p>\n
### hostnames.txt<\/p>\n
This file is where you define which hostnames or IPs are allowed. You can add
\none entry per line.<\/p>\n
**Examples:**<\/p>\n
“`text
\n# Allow all subdomains of uwu.org.ua
\n*.uwu.org.ua<\/p>\n
# Allow exact hostname match
\nuwu.org.ua<\/p>\n
# Allow specific IP address
\n192.168.1.1<\/p>\n
# Allow IP range 192.168.1.0-255
\n192.168.1.*
\n“`<\/p>\n
## Discord Webhook<\/p>\n
To use the Discord logging feature:<\/p>\n
1. Create a Webhook in your Discord server (Server Settings -> Integrations ->
\n Webhooks).
\n2. Copy the Webhook URL.
\n3. Paste it into the `discord-webhook` field in `config.yml`.
\n4. Enable `log-allowed-connections` or `log-denied-connections` as desired.<\/p>\n
# License<\/p>\n
This project is licensed under the Mozilla Public License 2.0<\/p>\n","protected":false},"excerpt":{"rendered":"
A simple yet powerful Velocity proxy plugin that restricts server access to specific hostnames or IP addresses. This is useful for preventing direct IP connections or enforcing the use of specific domains (e.g., `uwu.org.ua`).<\/p>\n","protected":false},"featured_media":0,"template":"","meta":{"_minecraft_slug":"hostname-ip-whitelist","_minecraft_project_id":"SNx1hIEk","_minecraft_author":"9gv","_minecraft_license":"MPL-2.0","_minecraft_downloads":47,"_minecraft_follows":2,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"hostname-ip-whitelist.zip","_minecraft_size_bytes":11370,"_minecraft_version_count":1,"_minecraft_updated_at":"2026-05-15T21:17:00.303432Z","_minecraft_date_created":"2026-01-13T21:56:53.895442Z","_minecraft_date_modified":"2025-12-31T06:16:32.418468Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/hostname-ip-whitelist","_minecraft_icon_attachment_id":0,"_minecraft_imported_at":"2026-06-04T17:19:12+00:00","_minecraft_import_hash":"4c93f76abab71ad7286306005aabf5bd","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[126,123,92,985],"mod_loader":[986],"minecraft_version":[41],"class_list":["post-82233","mod","type-mod","status-publish","hentry","mod_category-management","mod_category-technology","mod_category-utility","mod_category-velocity","mod_loader-velocity","minecraft_version-1-21-11"],"yoast_head":"\n