diff --git a/readme.md b/readme.md index a219ef3..6f843ad 100644 --- a/readme.md +++ b/readme.md @@ -41,6 +41,23 @@ collisions: max-entity-collisions: 2 ``` +### Command suggestion packet spam + +Some commands on the server might have a lot of logic involved with their command suggestions. This can be exploited by +sending a lot of packets that request the server to send suggestions for the command. This can be mitigated by setting +packet limit for command suggestions that is just slightly above fast rate of typing commands, so normal players won't +be affected. + +`paper-global.yml` +```yaml +packet-limiter: + overrides: + ServerboundCommandSuggestionPacket: + action: DROP + interval: 1.0 + max-packet-rate: 15.0 +``` + ### Command spam While even spigot will protect you from this exploit, there's a slight oversight that will enable a single command to be @@ -101,6 +118,22 @@ entity_timeouts: SNOWBALL: 200 ``` +### Recipe book spam + +Malicious players can use auto clicker or a mod to switch between recipe book recipes extremely quickly. This is pretty +expensive operation for the server and can cause huge slowdowns. This is actually fixed in default paper config, but +older configs might not have it added, so make sure it's there. + +`paper-global.yml` +```yaml +packet-limiter: + overrides: + ServerboundPlaceRecipePacket: + action: DROP + interval: 4.0 + max-packet-rate: 5.0 +``` + ### Treasure search When new treasure map is generated, usually via cartographer villager or opening a chest with treasure map in it, the