egghelp/eggheads community Discussion of eggdrop bots, shell accounts and tcl scripts. 2002-09-11T07:03:08-04:00 https://forum.eggheads.org/app.php/feed/topic/2571 2002-09-11T07:03:08-04:00 2002-09-11T07:03:08-04:00 https://forum.eggheads.org/viewtopic.php?p=10773#p10773 <![CDATA[Time for a new kind of ban ?]]>
99% of ISP's provide a different IP when using dial-up modems. It's cehaper, simpler and does mean as muny IP's wasted (IE, contention on IP's).

Some of the ideas are good as well, however, most are flawed.

MAC address: This is not obtainable. A router does not pass MAC addresses between physical segments (unless forced to), thus, due to the nature of the internet (i gurrentee 99% of your connections pass through at least 4 routers, 2 of which, do not belong to your ISP), there is no way of obtaining it.

CTCP replies can be forged the same was as ident's. Even worse, most clients use standard replies.

Using the reply of /version is jsut a no-go. It would be like banning 80% of IRC off your channel, seening as most user use mIRC.

/finger. Depending on which method used (TCP socket based or CTCP based), this would also provide usless info. CTCP fnger in mirc, replies a clients idle time, which is usless in a ban. The TCP socket kind is hardly ever used any more, and those that do use it probably don't know it's there.

Normal bans are still by far the best method to keep out trouble.

ppslim!hert@dsl-in-56854.hgw23.isp.com
&
kkkk!kkkk@dsl-in-54223.hgw23.isp.com

There is no way to tell if this is the same person.

If some1 leaves, changes there nickname and rejoins, the a ban mask of "*!*hert@desl-in*.isp.com" would have banned the first person. However, disconnecting from the IRC server is required to change identd.

The hostname is by the far the best to ban against, due tot eh fact, the user has no control over it. Everything else, he/she has.

Statistics: Posted by ppslim — Wed Sep 11, 2002 7:03 am

]]> 2002-09-11T06:39:13-04:00 2002-09-11T06:39:13-04:00 https://forum.eggheads.org/viewtopic.php?p=10772#p10772 <![CDATA[Time for a new kind of ban ?]]>
As you all know most of the ISP's uses DHCP when providing inet to they'r customers.
Some ISP's like UPC (chello) let the customer have the same IP over a longer periode of time. Others force a change in IP adress every time the login to the inet.

Having this problem with a new host every time someone logs in, all he have to do is to change his ident / nick to avoid a perm ban.

Now, the question is. Is it time to look into other means of banning/permbanning pepole from the channel ?
Would it be possible to combine it with a MAC adress ?
Is it possible to put an other fingerprint on the user ? Maybe using /finger, /ver and other CTCP replys as a ban variable ?

The amount of users that are willing to change they'r nick and ident to enter a channel they are banned from is low. Are there any way of keeping a trace of these users ?

If i where a l33t hax0r TCL writer i wold jump right on this, but i'm not :)

Reidar
aka. Ray^^

Statistics: Posted by Guest — Wed Sep 11, 2002 6:39 am

]]>