BAN by MAC Address?

  • Two Factor Authentication is now available on BeyondUnreal Forums. To configure it, visit your Profile and look for the "Two Step Verification" option on the left side. We can send codes via email (may be slower) or you can set up any TOTP Authenticator app on your phone (Authy, Google Authenticator, etc) to deliver codes. It is highly recommended that you configure this to keep your account safe.

Derelan

Tracer Bullet
Jul 29, 2002
2,630
0
36
Toronto, Ontario
Visit site
wouldn't it be something like 'ban #.#.#.*' to ban an entire isp? But if you're like me and on sympatico, that still wouldnt work, because sympatico connects to random networks accross ontario, so the entire IP would change.
 

geogob

Koohii o nomimasu ka?
not it wouldn't ban an ISP but that whole subnet. correct nomenclature would be 1.1.1.0/24. This would ban all the 1.1.1.x adresses with the mask 255.255.255.0 (which is a whole class C, or 255 adresses). Thus 1.1.1.0, 1.1.1.1, 1.1.1.2, ... , 1.1.1.255 would be banned.

if you band 1.1.0.0/16, now you're talking serious business. That is you ban a whole class B of 65536 adresses. That would be all adresses 1.1.x.x with the mask 255.255.0.0.

You can also do weird combinations.

What is important to understand, ISP wise, is that normally an ISP owns one or multiple class C or class B. If you ban a whole class C, you might bloc a whole ISP, a part of an ISP or multiple ISP (which is rare since normal subdivision is in C class of 255 adresses). It is important to understand the difference between ISP and IP-range. Normally, an ISP has his own IP range (or ranges) he uses. But an ISP doesn't always own a whole class C or B. Anyway, you get the picture :p

But I don't think the point is to ban an ISP... that's why some of us (including me) are against banning IP-ranges. Or at least ban my infamous range 1.0.0.0/0

edit:The Internet Assigned Numbers Authority (IANA) is responsible for those things. Port numbers are also under their authority. iana.org
 
Last edited:

Cleeus[JgKdo]

because respawns suck
Jun 8, 2002
798
0
0
Germany
www.cleeus.de
geogob, this banning here is about the UT banning rules.

In UT, you ban someone like Derelan said:

#.#.#.*

where # is a number between 1 and 255

eg.
123.234.*.*
or
76.54.32.*
or
*.*.*.* ;)
 

[SOB]bAd ChIcKeN

Free-Range Pain the Ass
Feb 6, 2001
266
0
0
55
www.sobservers.com
Banning a subnet is almost useless at this point as well, seeing that most folks are DCHP and can restart their Modems to get a new IP range. Sad I know but the only way is to babysit the idiots, and ban them often enough they get bored and move on. This is why SOB stopped hosting a Unreal INF server some time ago, we spent more time babysitting and less time having fun playing the game we love.
 

Hadmar

Queen Bitch of the Universe
Jan 29, 2001
5,567
45
48
Nerdpole
@geogob
Ah, I didn't know it's possible to request the MAC during connection setup, thanks. About the private MACs: I doubt they exist and I guess Freon understood something wrong, however, I know my knowledge is far from complete so I might as well be wrong, that's why I asked for a link. :)
 

AhBeeDoi

New Member
Jan 4, 2003
19
0
0
here
Visit site
The MAC address is hardcoded into the ethernet card and cannot be changed. There is no private MAC address but there are private IP addresses (ranges 172.160.0-172.31.0.0/12 bit prefix , 192.168.0.0-192.168.255.0/16 bit prefix and network 10.0.0.0/8 bit prefix). The MAC address you see is from the last router that the packet traversed.

I suppose it's possible to build in a request to send the original MAC address but that would have to be built into Infiltration. There's also no guarantee that somebody couldn't figure a way to spoof it.
 

777_wales

New Member
Jul 31, 2004
11
0
0
HOW DO U BAN PLAYERS IN THE 1ST PLACE? I WAS IN A GAME AND A GUY WAS JUMPING INTO THE VEHICLES AND JUST SITTING THERE ON PURPOSE, HOW DO I FIND HIS I.P OR MAC AND BAN HIM FROM THE SERVER? THANKS
 
Last edited by a moderator:

frenchfrog

The mighty batrachian
Jan 18, 2004
139
0
0
Quebec, Canada
www.ghostdogs.net
man, some people don't get how internet works.

1) MAC addresses are only good in a given local network (LAN), they are not unique accross a WAN and each manufacturer is given a range. (thus from the MAC address you can tell the manufacturer of the NIC). Also, I don't think there is a way to request the original MAC address on a WAN. And even if there was a way, most manufacturer give you the possibility to change it because of the possible conflit.

2) Even if someone is on DSL and reset it to have a new IP address, most of the time it will be given a IP address in the same block because ISP are given only a limited number of ip ranges block.

Thus, banning IP ranges is every efficient.

(sry Odie for ressurecting the thread :| )
 
Last edited:

geogob

Koohii o nomimasu ka?
banning IP range is just lame.

It's just banning all blacks people or all arabs from a party because one of them ruined it once. Of course by banning all of them, he'll never get in again... problem solved... until a white american or a latino ruins the party again.

Of course, benning ISP ip range isn't anything racial and won't make people jump 10 feet high... but it's basically the same... you'll make sure your cheater won't get on by making sure no one from his ISP can get in. That will work and keep the party safe... until one comes in from another ISP.
 

frenchfrog

The mighty batrachian
Jan 18, 2004
139
0
0
Quebec, Canada
www.ghostdogs.net
I agree that banning IP ranges is not the best solution but UT99 is flawed and internet is relatively flawed.

UT99, because you don't have a cd key and thus not unique identifier.
Internet, because it realtively easy to change your unique identifier, your IP.

Thus, in the case of UT99, banning IP ranges is the only way the proceed. Sure we could probably make a mutator that hide is unique identifier inside is code or just wait for HL2 Infiltration but until then ...

we'll just do like irc servers, email filtering software, P2P servers, universities servers.