TechSpot

Blocking an IP address that keeps changing?

By halo71
Feb 8, 2007
Post New Reply
  1. Okay this may be a dumb question....but. A new guitar/music forum that I belong to, and know the admin. Is having a problem with a poster that keeps signing up under a new name after getting banned. All he does is post porn links among other stupid stuff. I told the admin to just block his IP. But he says it does not show up. Hosting a forum is new to both of us as well. Any ideas???
     
  2. SNGX1275

    SNGX1275 TS Forces Special Posts: 12,651   +323

    What software is the board using? There really has to be a way to see the user's IP. Our buddies over at Neowin have a forum specifically for Bullitin Boards: http://www.neowin.net/forum/index.php?showforum=99 so it may be worth looking there if you need an answer immediately.
     
  3. halo71

    halo71 TS Rookie Topic Starter Posts: 1,289

    Please forgive my ignorance but I guess you are talking vB or phpBB? If so I think it is phpBB.

    EDIT: Also he is not really hosting the site. Its a free hosting site. I went to that link, tryed a search. Told me I had to be a member to use that feature! I will keep looking though. Thanks for the link.

    EDIT #2: Yes it is phpBB. I just found out that this user's IP address keeps changing. That is why we cant block the IP address. We know its the same person from what he post, his profile, link to his website etc.
     
  4. jobeard

    jobeard TS Ambassador Posts: 13,469   +327

    see if you can capture is MAC address and filter on that :)

    you're going to need someone who really understands TCP/IP as well as
    web servers.

    During the login process, you know he's online and the current IP
    address. Make a reverse connection to grab the MAC and save in the users profile.
    Once they start making content you disapprove, you can copy the
    MAC into another table ejectedUsers(MACaddress).

    Now you can await the next login and sample ;
    Make a reverse connection MAC == ejectedUsers(MACaddress) and disallow
    login.

    content from ejectedUsers(MACaddress,loginID) can also be auto deleted
    in background.
     
  5. Nodsu

    Nodsu TS Rookie Posts: 9,431

    ...

    Needs some reading up on networks perhaps

    MAC addresses are totally unusable across routers because a MAC address is an ethernet-level entity and is used to address a device only on its local network. And since these are internet forums, there are many, many routers between the user and the server.

    If you were to do a "reverse connection" on an internet IP, you would get the MAC address of the first router device in the IPs direction. And blocking that MAC would effectively block all traffic from that router. Since most servers have only one gateway, you would effectively cut off all intenet access to your server (and you'd have to get local access to take it online again).

    And, even if you were able to obtain the MAC address of the user's computer through some trickery, all he would have to do would be to use another computer or change the MAC in the network card's properties.
     
  6. halo71

    halo71 TS Rookie Topic Starter Posts: 1,289

    I think maybe my admin friend should contact the owners/admins of the hosting site to see what can be done. Neither of us know squat about TCP/IP etc. Thanks for all your help. I was hoping it would be something fairly simple that would fix this.
     
  7. halo71

    halo71 TS Rookie Topic Starter Posts: 1,289

    I looked over at Neowin and didnt really find anything that helped me. But we are still seeing the same user signing up on the site posting porn links etc. Every single time the IP is different. I go in and ban the user and block the IP. Next day he is back under new name and IP. Any thought on stopping this would be most appreciated!

    EDIT: Can a mod please change the title of this thread to "Blocking an IP address that keeps changing??"

    Thread title edited. ;)
     
  8. Nodsu

    Nodsu TS Rookie Posts: 9,431

    Are the IP addresses from the same network (first numbers are the same)? If yes, then you can just block the entire IP range. Other than that, there is nothing you can do really.
     
  9. halo71

    halo71 TS Rookie Topic Starter Posts: 1,289

    Only 2 of the IP's start the same. The others are always different. Guess I will just start blocking them one at a time. Thanks for your help!
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.