RustyHeathensModGuard

Rusty Heathens ModGuard

The approved-client-mod guard used by the Heathens' Haven Valheim server.

Install and update

Install ModGuard 0.2.2 on the server and all connecting player PCs. Use Mod Manager or r2modman in the profile used for the server. Keep one active copy of ModGuard; move earlier manually installed test DLLs outside BepInEx/plugins when switching to the mod-manager version.

Keep the server's existing BepInEx/config/com.rustylasergaming.modguard.cfg. This package contains no server policy config or account IDs. Approved plugins and admin access remain controlled by your server config.

What's new in 0.2.2

• Start the report deadline after the peer becomes ready for routed RPC.
• Retry the client mod report every 3 seconds until the connected server acknowledges it.
• Snapshot the server peer list before enforcement so disconnecting a peer does not invalidate iteration.
• Use a 60-second default report timeout and upgrade the previous 20-second default. The supported range is 10 to 180 seconds.
• Accept report acknowledgements only from the connected server.
• Preserve configured allowlists and admin IDs. Intentional version pins remain intact after the earlier config-only migration.

Server policy

Edit only the server config. The policy entries are AllowedForPlayers, AdminOnly and AdminSteamIds.

Use bare BepInEx plugin GUIDs to allow ordinary version updates. Exact guid@version pins remain available when the server owner deliberately chooses them. Approved plugins are optional: players do not have to install every allowed mod. Unapproved plugins and normal players using admin-only plugins are denied in Enforce mode. Audit logs results without disconnecting; Disabled turns admission checks off.

The DLL contains no baked player allowlist, admin-only list or fallback admin IDs. This is a normal-client compatibility/policy guard; client reports can be falsified by a deliberately modified client.

Verification

Built against the supplied Valheim 1.0.16 and BepInEx assemblies. Policy and admission regression checks pass as part of the 282-check update set. Live allow/deny and reconnect behavior must be verified on the server. Startup identifies version 0.2.2 and Policy source=server config only.