All checks#
OmniGuard ships 35 checks. Each one is configured under checks.<id> and can be bypassed with omniguard.bypass.<id>. Common keys: enabled, cancel, alert-vl, max-vl, decay-per-second, kick, instant-kick, commands (see Configuration).
This table is generated from the source code, so it always matches the shipped version.
| Check id | Layer | Protects against | Default kick | Specific settings |
|---|---|---|---|---|
frame-guard |
Packet | Netty frame / byte flood | instant | play-frames, play-bytes, pre-play-frames, pre-play-bytes, max-frame-bytes, max-pre-play-frame-bytes |
connection-flood |
Connection | Connection flood per IP | no | per-ip, trusted-multiplier, block-after-refusals, block-seconds, behind-proxy, whitelist |
packet-rate |
Packet | Packet rate limiter | at max-vl | global, limits, configuration |
packet-size |
Packet | Oversized packet | instant | limits |
malformed-packet |
Packet | Malformed packet | at max-vl | — |
invalid-movement |
Packet | Invalid movement / position crash | instant | strict-pitch, max-move-per-packet |
book |
Packet | Book exploit | instant | max-pages, max-page-chars, max-title-chars, max-total-bytes |
sign |
Packet | Sign exploit | at max-vl | max-line-chars, max-lines |
window-click |
Packet | Invalid inventory click | at max-vl | max-changed-slots |
creative |
Packet | Creative item exploit | at max-vl | require-creative-mode, max-item-bytes, max-stack-size |
tab-complete |
Packet | Tab-complete crash | at max-vl | max-length, max-nesting-depth, max-selectors |
command |
Packet | Crash / exploit command | no | max-length, max-nesting-depth, blocked-patterns |
chat |
Packet | Chat exploit | at max-vl | max-length |
plugin-message |
Packet | Plugin channel abuse | at max-vl | max-channel-length, max-registered-channels, max-brand-length, blocked-channels |
anvil |
Packet | Anvil rename exploit | at max-vl | max-length |
invalid-slot |
Packet | Out-of-range slot index | instant | — |
admin-packet |
Packet | Unauthorized admin packet | no | — |
interact |
Packet | Interaction / reach exploit | at max-vl | max-distance, block-self-interact |
client-settings |
Packet | Invalid client settings | at max-vl | max-locale-length |
item-ledger |
Dupe | Duplicated item (provenance ledger) | no | action, tracked-items, track-unstackable-enchanted, scan-interval-seconds, ignore-creative, custody-depth, template-threshold, ignore-worlds |
gain-monitor |
Dupe | Abnormal item gain | no | window-seconds, thresholds |
dupe-patches |
Dupe | Known dupe vector | no | block-inventory-entities-in-portals, close-inventories-safely, block-dead-player-actions, max-drops-per-second |
redstone |
World | Redstone clock / lag machine | no | max-updates-per-chunk, throttle-seconds, action |
piston |
World | Piston flood | no | max-per-chunk-per-second, throttle-seconds |
entity-cap |
World | Entity cap per chunk | no | limits, ignore-spawn-reasons |
explosion |
World | Explosion flood | no | max-per-chunk-per-second |
chunk-ban |
World | Chunk / book ban | no | max-container-bytes, max-player-inventory-bytes, max-item-bytes, max-lectern-book-bytes |
hopper |
World | Hopper lag machine | no | max-moves-per-chunk, throttle-seconds |
login-guard |
Connection | Bot join flood | no | name-pattern, bedrock-prefixes, max-rejoins, rejoin-window-seconds, max-accounts-per-ip, attack-max-accounts-per-ip, per-ip, reconnect-min-seconds, reconnect-max-seconds, whitelist |
alt-link |
Connection | Ban evasion / linked account | no | block-evasion |
privilege-guard |
Server | Untrusted operator / creative | no | trusted-operators, enforce-creative |
illegal-items |
Dupe | Illegal item (enchant / stack / unbreakable) | no | fix, max-enchant-level, ignore-plugin-items, allow-unbreakable, check-stack-size, ignore-creative |
fingerprint |
Server | Plugin fingerprinting command | no | blocked-commands, blocked-namespaces |
chunk-gen |
World | Chunk generation flood | no | max-new-chunks-per-second, pause-seconds |
external |
Server | Reported by another plugin (API) | no | — |