Add option to disable IP check

[JasonHorkles]

I have a dynamic IP address and since a FQDN can't be resolved, it would be nice if there was an option to just disable the IP check in the first place
(Or, alternatively, FQDN resolving would be nice too, so dynamic DNS can be used)

Another possible solution would be to generate a unique code on the backend server that's sent with the request and have the proxy validate it, similar to how BungeeGuard works in that regard.

[Hopefuls]

Hey,

yes I must admit, I have not thought about cases regarding IPs not being static. The reason the IP check was added is due to how the bungeecord messaging channel works, and have not had time to implement a more robust solution. The initial exploit was how the origin of a message through the plugin channel was not checked properly, allowing execution from anywhere.

I agree, it might seem like a good idea to resolve FQDNs itself, or allowing setting a password within your bungeecord that should match. Or using a more cryptographic approach into this.

Once I have more time and resources to approach this, I will do so. I do not have any ETA for this as of now. Thanks for understanding.

Update: if you're interested in learning more about it, you can read this post on a forum regarding it. My implementation of the Plugin Messaging Channel is not the greatest idea.

[JasonHorkles]

Gotcha, thank you!!

No rush, I've gone ahead and implemented my own plugin messaging that's not allowed to run any command so the change would really just apply to other people at this point
Thanks again!