[SECURITY QUESTION] Blocking players from joining

I know WhiteList isn't that secure so;
How do I block all outside players from my server (as in anyone who tries to join will be deflected)?

 

How do you mean, whitelist isn't so secure? It totally is, as long as you're in online-mode=true.

 

I have heard and seen first hand too many stories/incidents where a client is used to bypass the Whitelist system.

 

Impossible. At least, impossible with online-mode=true.

 

If you don't mind telling me, how would it be impossible?

 

whitelist blocks all connections from all players unless that player's minecraft name is on the allowed list. Now, if online-mode= false, then all someone has to do is change their name to someone who is whitelisted. If online-mode= true, then you cannot change your minecraft username, making it impossible :/. Unless someone steals that person's minecraft password, its secure.

 

Thanks!

 

I think you should be telling us how it is possible to bypass. I am fairly certain anyone with experience will tell you that you cannot bypass the whitelist if you are running on online mode true server.

 

No, you haven't seen first hand any such thing, because there is no such thing. Unless you just outed yourself as running a cracked server which of course is a huge security hole and also not supported on Bukkit.