How to Ban by IP

[rafaeltonholo]

Hi,
In my server, i have any problems with players.
I would like know if have a way for ban him by ip.
I know u can do this in Mu, but i didn't see this in any server of PW.
I Need that URGENTLY!
Thanks for urs Attention
and sry my bad English

[MentaL]

[das7002]

Don't use the PW server itself as a ban regulator, it just sucks at it

To ban by account not by IP, just make a new table in MySQL that copies username id and password into it and then just puts random garbage into the authd table until ban is set to expire, tada, that is probably how PWE even does it

To ban by IP

iptables -I INPUT 3 -s IPADDRESSHERE -j DROP

And then either add that to the init.d firewall setup or manually add it each time the server boots, but eitherway that just has the iptables firewall drop all data they try to send to the server

[hrace009]

what about if that user using dynamic IP address

i think it more better if band from MAC Address

[Romulan]

Don't use the PW server itself as a ban regulator, it just sucks at it

To ban by account not by IP, just make a new table in MySQL that copies username id and password into it and then just puts random garbage into the authd table until ban is set to expire, tada, that is probably how PWE even does it

To ban by IP

iptables -I INPUT 3 -s IPADDRESSHERE -j DROP

And then either add that to the init.d firewall setup or manually add it each time the server boots, but eitherway that just has the iptables firewall drop all data they try to send to the server

No need an extra table. A ban procedure and the forbid table already exist for that.

- You can make a PHP script for it.
- You can make a pwAdmin addon for it.
- You can use BATGM0.8 for it.
- You can use the ban function with the gm console (lazy way).

And btw, authd table is used for GM accounts, not for ban ppl......

[vhost]

static ip ban ok
dynamic ip ban, router reset and you have a new ip

make more sense would be a ban hostmask that changes but also ...

[rafaeltonholo]

what about if that user using dynamic IP address

i think it more better if band from MAC Address

And who i can do this?

[rbb138]

pw doesnt support MAC banning.

[das7002]

static ip ban ok
dynamic ip ban, router reset and you have a new ip

make more sense would be a ban hostmask that changes but also ...

Not where I live...

My ISP gives out dynamic IP addresses that might as well be static, I've reset router and modem many many times while I've had them for about 3 years now and have had the same IP address since I got it... and no I did not get an static IP from them..

I also know a lot of other ISPs that do the same specifically to make changing IP address difficult for them (and have better user traceability in the case of fraud etc)

what about if that user using dynamic IP address

i think it more better if band from MAC Address

That only works at local scope and can be easily changed, after it leaves the local scope it can no longer be seen

[Szaer]

I'm pretty sure I had a simple way of doing this in my IPlogger pack. :T

As long as you can block them from registering then you don't need to block them from the game. The IPlogger keeps a record of who registered from what IP, so then you can also go back and see what all accounts they made and ban those too.

[Zorno]

A simple way is by writing a small program that checks the Hardware ID of the connections and refuse all connections from the "banned" ID. So this computer will be banned. When you combine that with MAC ID its 20% secure ( until that person buys a new PC )
Good people know how to hide MAC, Hardware ID and other stuff btw so there will never be a 100% secure system.

[das7002]

A simple way is by writing a small program that checks the Hardware ID of the connections and refuse all connections from the "banned" ID. So this computer will be banned. When you combine that with MAC ID its 20% secure ( until that person buys a new PC )
Good people know how to hide MAC, Hardware ID and other stuff btw so there will never be a 100% secure system.

Only flaw in that, as like I said earlier the MAC address is only ever seen on a local scope otherwise we'd be having a way larger issue then IPv4 addresses running out

The chances of having two machines with the same MAC address on the same local network is so damn low it doesn't really matter, its like how local IP addresses work, don't believe me? Use Wireshark and look at incoming connections to your machine IP address is there but MAC is nowhere to be found (and wireshark shows the entire TCP breakdown)

It does show a MAC address in the TCP connection, but guess who's it is? Your ISPs router, go ahead and check if you wish, it will be the same on all connections

So by blocking by MAC address you'll just block everyone as it is a local only identifier

[Zorno]

Only flaw in that, as like I said earlier the MAC address is only ever seen on a local scope otherwise we'd be having a way larger issue then IPv4 addresses running out

The chances of having two machines with the same MAC address on the same local network is so damn low it doesn't really matter, its like how local IP addresses work, don't believe me? Use Wireshark and look at incoming connections to your machine IP address is there but MAC is nowhere to be found (and wireshark shows the entire TCP breakdown)

It does show a MAC address in the TCP connection, but guess who's it is? Your ISPs router, go ahead and check if you wish, it will be the same on all connections

So by blocking by MAC address you'll just block everyone as it is a local only identifier

True. But what if i have a direct connection ? Ok in my case IP ban whould work because i have a static one
And its still possible to mask MAC adresses *starts to whistle*

[das7002]

True. But what if i have a direct connection ? Ok in my case IP ban whould work because i have a static one
And its still possible to mask MAC adresses *starts to whistle*

There is no such thing as a direct connection on the internet, there are a lot of routers in between each connection even if you are next door neighbors, doesn't make a whole lot of sense all the time but that is just how it works

Only way to guarantee you see their MAC address is to be on the same exact network as the other machine, which means only one router between you and them or a direct (as in one ethernet cable) connection between the two

And yes your modem counts as one router so that prevents you from seeing a lot of people's MAC addresses even if they are on the same ISP

[Zorno]

There is no such thing as a direct connection on the internet, there are a lot of routers in between each connection even if you are next door neighbors, doesn't make a whole lot of sense all the time but that is just how it works

Only way to guarantee you see their MAC address is to be on the same exact network as the other machine, which means only one router between you and them or a direct (as in one ethernet cable) connection between the two

And yes your modem counts as one router so that prevents you from seeing a lot of people's MAC addresses even if they are on the same ISP

More or less the dslam is a router also.
But what i wanted to say is, there is no chance to ban someone 100%. If someone wants to get in he will get in

[vhost]

"Not where I live...

My ISP gives out dynamic IP addresses that might as well be static, I've reset router and modem many many times while I've had them for about 3 years now and have had the same IP address since I got it... and no I did not get an static IP from them..

I also know a lot of other ISPs that do the same specifically to make changing IP address difficult for them (and have better user traceability in the case of fraud etc)"


Some providers have problems with dynamic ip
, Yes.
but not as normal and the ip is not the same.

ok for me to do this and that would mean that the user gets the ip and the game play, would come not on the server.

and because of the MAC address that can be changed.

as I said the router is reset hostmask even with, for one day receive minimum is the same.

Edit: you can call your provider and ask to receive a response ;)

---------- Post added at 10:28 AM ---------- Previous post was at 09:55 AM ----------

ok, thought

user has a fixed IP and does not proxy server .... you can, ban ...

users has dynamic ip or is about proxy server, you ban the ip and the user does what?

I have played on the malaysia banned from the server as the ip range Telecoms was about proxies, ergo does not ban the ip ...

I hope I could help :))

[Zorno]

"Not where I live...

My ISP gives out dynamic IP addresses that might as well be static, I've reset router and modem many many times while I've had them for about 3 years now and have had the same IP address since I got it... and no I did not get an static IP from them..

I also know a lot of other ISPs that do the same specifically to make changing IP address difficult for them (and have better user traceability in the case of fraud etc)"


Some providers have problems with dynamic ip
, Yes.
but not as normal and the ip is not the same.

ok for me to do this and that would mean that the user gets the ip and the game play, would come not on the server.

and because of the MAC address that can be changed.

as I said the router is reset hostmask even with, for one day receive minimum is the same.

Edit: you can call your provider and ask to receive a response ;)

---------- Post added at 10:28 AM ---------- Previous post was at 09:55 AM ----------

ok, thought

user has a fixed IP and does not proxy server .... you can, ban ...

users has dynamic ip or is about proxy server, you ban the ip and the user does what?

I have played on the malaysia banned from the server as the ip range Telecoms was about proxies, ergo does not ban the ip ...

I hope I could help :))

banning IPs is crap. Use hotspotshield and whoa you have a new IP ( even with static )

[Suedevander]

how can I see the ip of the guy? and it works there?

[renan7899]

how can I see the ip of the guy? and it works there?

Open your server machine or Vbox/Vmware with putty.

apt-get less

less [PWServerpath]/logservice/logs/world2.formatlog

Find the login's IP.

After that create an .sh script with

#!/bin/bash

 iptables -I INPUT -s IPHERE -j DROP

CTRL + O, CTRL + X

chmod 0755 script.sh

./script.sh

Done.

[Suedevander]

Thnx earned