/banmask

Post all ideas and suggestions for fCraft here
Post Reply
BobKare
Offline
Posts: 279
Joined: May 26th, 2011, 2:15 pm

/banmask

Post by BobKare »

Hey all!

I've experienced several times, that you IP-ban someone, then they come back by changing their routers IP.

I think it would be good if we were able to ban a mask, like 217.24.***.*, then use /banmask 217.24, or /banmask <player>.

Please tell me if this is possibly done!

Thanks looking into it,

-BobKare

User avatar
Hellenion
Offline
Posts: 220
Joined: October 20th, 2011, 9:20 am
Location: Subnet
Contact:

Re: /banmask

Post by Hellenion »

/banip *.*.*.* has a lot of griefers

Edit:
I'm sorry, I don't know anything about these "masks" you speak of.
A = {x ∈ P(U) | x ∉ x}
Mods:
  1. /Su - Allows players to temporarily become a different rank
  2. /Snap - Like /Line but only draws straight or diagonal lines.
  3. pre-0.630 skip/none block

BobKare
Offline
Posts: 279
Joined: May 26th, 2011, 2:15 pm

Re: /banmask

Post by BobKare »

Hellenion wrote:/banip *.*.*.* has a lot of griefers

Edit:
I'm sorry, I don't know anything about these "masks" you speak of.
If some ppls make their router change IP, the router will probably keep the mask.

The mask is the first two numbers of the IP: 80.212.151.22

User avatar
Hellenion
Offline
Posts: 220
Joined: October 20th, 2011, 9:20 am
Location: Subnet
Contact:

Re: /banmask

Post by Hellenion »

won't you then be banning thousands of innocent players with the same ISP?
A = {x ∈ P(U) | x ∉ x}
Mods:
  1. /Su - Allows players to temporarily become a different rank
  2. /Snap - Like /Line but only draws straight or diagonal lines.
  3. pre-0.630 skip/none block

BobKare
Offline
Posts: 279
Joined: May 26th, 2011, 2:15 pm

Re: /banmask

Post by BobKare »

Well, I'm not very experienced with this, but some guy told me about the ability to ban masks^^

User avatar
fragmer
fCraft Developer
Offline
Posts: 1386
Joined: May 21st, 2011, 10:53 pm

Re: /banmask

Post by fragmer »

fCraft has ability to look up players by IP range (fCraft uses CIDR notation instead of the more common dot-decimal notation that you used in examples). To look up all players in 217.24.*.*, type in "/Info 217.24.0.0/16".

There is no ability to ban IP ranges, although I might add it at some point. Note that banning IP ranges will very likely result in accidental bans of innocent players. When you ban "X.X.*.*", you are banning 65536 addresses at a time - effectively a whole region.

BobKare
Offline
Posts: 279
Joined: May 26th, 2011, 2:15 pm

Re: /banmask

Post by BobKare »

fragmer wrote:fCraft has ability to look up players by IP range (fCraft uses CIDR notation instead of the more common dot-decimal notation that you used in examples). To look up all players in 217.24.*.*, type in "/Info 217.24.0.0/16".

There is no ability to ban IP ranges, although I might add it at some point. Note that banning IP ranges will very likely result in accidental bans of innocent players. When you ban "X.X.*.*", you are banning 65536 addresses at a time - effectively a whole region.
Thanks for a fast, informing answer.

Well, are there any way to ban such mf's that I mentioned in the first post?

User avatar
Intertoothh
Trustee
Offline
Posts: 1149
Joined: May 24th, 2011, 5:51 am

Re: /banmask

Post by Intertoothh »

/ipban 217.24.1.1
/ipban 217.24.1.2
/ipban 217.24.1.3
/ipban 217.24.1.4
/ipban 217.24.1.5

You get the drift :)

Maybe block them in your firewall?
McLaughlinKid wrote:You put roar on everything don't you?

Jonty800
Offline
Posts: 280
Joined: August 21st, 2011, 6:31 am
Location: United Kingdom
Contact:

Re: /banmask

Post by Jonty800 »

Ban MAC addresses?

Is that possible?

Would it allow you to win the game?
You cannot use certain BBCodes: [img].

User avatar
Lim-Dul
The Necromancer
Offline
Posts: 663
Joined: May 21st, 2011, 10:21 pm

Re: /banmask

Post by Lim-Dul »

Jonty800 wrote:Ban MAC addresses?

Is that possible?

Would it allow you to win the game?
MAC addresses are re-set every time the packet passes through a new device AFAIK and thus are not a practical way of blocking anything outside of the scope of one Network segment. (Correct me if I'm wrong.)
War does not determine who is right - only who is left. - Bertrand Russell

User avatar
Planitia
Offline
Posts: 74
Joined: May 29th, 2011, 8:12 am
Location: Sydney, AUSTRALIA

Re: /banmask

Post by Planitia »

Lim-Dul wrote:
Jonty800 wrote:Ban MAC addresses?

Is that possible?

Would it allow you to win the game?
MAC addresses are re-set every time the packet passes through a new device AFAIK and thus are not a practical way of blocking anything outside of the scope of one Network segment. (Correct me if I'm wrong.)
I'm almost sure they stay the same for every device unless changed. Usually on the Internet it uses the routers MAC address which can easily be changed.
Show
In theory they seem solid but the reason no one uses them for anything good is because they are way too easy to spoof.

I may also be slightly wrong, feel free to correct me. The quote is a Cited quote from Wiipedia simply because I cbb saying it in my own words.
"Excuse me, have you got a spare $10?".... Yeah I do. So would you if you had a job.

User avatar
Lim-Dul
The Necromancer
Offline
Posts: 663
Joined: May 21st, 2011, 10:21 pm

Re: /banmask

Post by Lim-Dul »

That's not what I meant. I meant that you only ever see the MAC address of the last hop (your Ethernet segment), which makes the whole exercise pretty useless - unless you want to ban people on LAN.
War does not determine who is right - only who is left. - Bertrand Russell

User avatar
Intertoothh
Trustee
Offline
Posts: 1149
Joined: May 24th, 2011, 5:51 am

Re: /banmask

Post by Intertoothh »

Jonty800 wrote:Ban MAC addresses?
Is that possible?
Would it allow you to win the game?
Yes, but useless. As other stated.

The mac-address is not a part of the tcp-ip protocol. And is not route-able.
Its a part of the 'Network interface/Datalink layer', allowed stuff to talk to eachother.
(info)


Banning a mac-address is for 'internet related stuff'

Can be usefull in internal networks, but more for switches etc.
(Good security policy is to have all addresses banned, exept the one's you know)

But they can be easly spoofed/changed.
McLaughlinKid wrote:You put roar on everything don't you?

User avatar
fragmer
fCraft Developer
Offline
Posts: 1386
Joined: May 21st, 2011, 10:53 pm

Re: /banmask

Post by fragmer »

There is no way to reliably obtain MAC addresses remotely.

Post Reply