[PwnK]

Description
This plugin's purpose is to kick anyone who tries to join your server with a VPN. It does it by checking from this website whether the client who is joining your server is using a VPN or not.
It then saves the ip and whether it's a proxy to a database so it doesn't need to check the same ip many times.
You can use either mysql or sqlite database with this plugin.

The plugin creates a log file to sourcemod/logs/VPNBlock_Log.txt and logs everyone who tries to join the server with a VPN.

Admin commands (require flag z)

PHP Code:

sm_vbwhitelist "<SteamID>" - Whitelists a steamid which is allowed to join even with a VPN.
sm_vbunwhitelist "<SteamID>" - Removes a steamid from whitelist. 


CVars
CVars are saved to your cfg/sourcemod/VPNBlock.cfg file.

PHP Code:

// 1 = Kick and log client when he tries to join with a VPN 0 = only log
vpnblock_kickclients "1"

// If the response contains this it means the player is using a VPN.
vpnblock_response "Y"

// The url used to check proxies.
vpnblock_url "http://proxy.mind-media.com/block/proxycheck.php?ip={IP}" 


Required extensions

• Steamworks

Installation

• Make sure you have Steamworks installed.
• Upload smx and translation file to your server
• (Optional) Add a new entry called "VPNBlock" to your databases.cfg. If this entry is not found the default entry is used.

Changelog

1.1.0 (17-Jan-2019)
    - Made the plugin use steamworks instead of system2 for http requests.
    - Added option to change the url which is used to check for vpns.
    - Added option to only log users who join with VPN instead of kicking them.

1.0.0 (16-Dec-2018)
    - Initial release.

Github repo
Direct download

[Lubricant Jam]

https://cidr-blocker.github.io/#/

What's the difference may I ask?

[PwnK]

Originally Posted by Lubricant Jam https://cidr-blocker.github.io/#/ What's the difference may I ask?

I have never used that plugin so I'm not sure actually. At least that it uses a different database for the proxies which might be a good or a bad thing. I have used this on my server for couple of weeks now and I haven't yet found a single vpn that gets past it so it has worked well for me.

[LaGgLs]

Great plugin just some small problem but its not the plugins problem it can give a false positives but other wise really good plugin

[PwnK]

Originally Posted by LaGgLs Great plugin just some small problem but its not the plugins problem it can give a false positives but other wise really good plugin

I have checked pretty much everyone's ip who this plugin has blocked and I haven't yet found any false positives. Of course if you get those you can just change that ip's proxy column to 0 from mysql or sqlite so it doesn't block them. I don't know how many false positives does this plugin detect but that can of course only be fixed by changing the database.

[DarkDeviL]

Originally Posted by Lubricant Jam https://cidr-blocker.github.io/#/ What's the difference may I ask?

You need to spend time to create the list of bad IP addresses with CIDR-Blocker yourself.

With this one, your server is calling a third party every time, to ask whether or not the IP is a proxy/VPN, and if it claims it is, it will act accordingly - and automated, without your you need to get your hands on the job with generating the list of bad IP addresses.

[Lubricant Jam]

Originally Posted by arne1288 You need to spend time to create the list of bad IP addresses with CIDR-Blocker yourself. With this one, your server is calling a third party every time, to ask whether or not the IP is a proxy/VPN, and if it claims it is, it will act accordingly - and automated, without your you need to get your hands on the job with generating the list of bad IP addresses.

Thought as much, thanks for the clarification. I'll make a switch shortly

[Lubricant Jam]

I seem to be getting a fair few false positives.

[virusking]

Originally Posted by Lubricant Jam I seem to be getting a fair few false positives.

Define false positives? The plugin simply redirects all checks through a third-party, you can double check the IPs through other third-party websites such as ipqualityscore, some services have larger databases.

[Lubricant Jam]

Originally Posted by virusking Define false positives? The plugin simply redirects all checks through a third-party, you can double check the IPs through other third-party websites such as ipqualityscore, some services have larger databases.

Budget ISPs detecting as a proxy, shortly put. I am aware it's a third party service I just thought I'd mention that source doesn't seem to be as reliable as put.

EDIT: I definitely think that there should be two checks put in place as I'm having a fair few people a day come to me asking to be unblocked and I'm checking their IPs and they're valid ISPs.