Is there a secure way to host a Minecraft Server?

chetmaster12

Honorable
Jan 19, 2015
163
1
10,695
So I'm not a complete Minecraft addict like some people, but I do like to play the game with friends every few days when I feel like it. I'd like to host my own server, for a few reasons. First, I like having control of my server directly, rather than using a hosting company. Now, I'm mostly worried about network security issues. I'd like to avoid possibilities of hacks. Now, I'd definitely run the server on Linux, since I'm more comfortable using it than Windows. It would be running on a dedicated server. I'm not a networking expert, but I do know some stuff. I've got AT&T internet, 50 Mbps down and 5 up (should be sufficient for lighter server use), with whatever router AT&T provides. Now, my plan was to set up pfSense box, and use that as a firewall, and connect it inside the network. Then I would connect the server to that.

So how stupid does this plan sound? Would this add much protection, and is it just a crazy and dumb idea?
 
Solution
Are you opening ports to the outside world? Yes. Thus, you are exposing yourself to threats. If you're planning on using the firewall to segregate your game server from the rest of your network, you are doing the most you can to reduce risk of a threat penetrating beyond the server with a single firewall. This concept is known as a DMZ in networking. The Minecraft server will sit in the DMZ, which is not protected as heavily from outside threats, but to get further into the network, you would have to pass through the firewall first.

I'm not a Linux expert, but I know a basic security measure is to disable the default root account in whatever distro you use to minimize some exposure from more automated attack.

viewtyjoe

Reputable
Jul 28, 2014
1,132
0
5,960
Are you opening ports to the outside world? Yes. Thus, you are exposing yourself to threats. If you're planning on using the firewall to segregate your game server from the rest of your network, you are doing the most you can to reduce risk of a threat penetrating beyond the server with a single firewall. This concept is known as a DMZ in networking. The Minecraft server will sit in the DMZ, which is not protected as heavily from outside threats, but to get further into the network, you would have to pass through the firewall first.

I'm not a Linux expert, but I know a basic security measure is to disable the default root account in whatever distro you use to minimize some exposure from more automated attack.
 
Solution