Forum Moderators: rogerd

Message Too Old, No Replies

How do I ban an IP address?

         

Helpinghand

1:22 am on May 16, 2007 (gmt 0)



Hi,

I get spam posts on my forum, deleting members don't work, nor does sending warning sticky type mails, so is there a way to actually ban the instigators IP address?

I use a common phpBB message board system.

It says this:

Ban one or more IP addresses or hostnames
IP addresses or hostnames:
To specify several different IP addresses or hostnames separate them with commas. To specify a range of IP addresses, separate the start and end with a hyphen (-); to specify a wildcard, use an asterisk (*).
--------------------------------------------

But what do I do to ban an IP? I want to be able to ban single IP address and not ranges eg: member spams board, they get banned.

I don't even know if this is possible to do.

Can someone take me through this step by step.

Thanks

encyclo

1:30 am on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



In the phpBB control panel:

User Admin > Ban Control > Ban one or more IP addresses or hostnames

Just add the user's full IP address (format 111.222.333.444) and hit Submit. You can get the user's IP address by clicking IP on their latest post.

Helpinghand

1:39 am on May 16, 2007 (gmt 0)



And will this stop them re-joining, even if they invent a fresh member/user name?

encyclo

1:58 am on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



If they use the same IP address, yes, but of course if that're on dial-up or have a frequently-changing IP address from their ISP, it will only block them in the short-term.

You should look also at the "MOD Troll" which gives some good options to deal with particularly troublesome members:

[phpbb.com...]

MThiessen

3:37 pm on May 16, 2007 (gmt 0)

10+ Year Member



Good luck with that...

Nowadays they use proxies, you might actually be banning large blocks (if you use a wildcard) of legit users.

IP banning is out-dated and uneffective IMO.

Best strategy is to employ ALL security measures you can find. Things like a "Humanizer" question, a better captcha, email confirmation required etc etc

Don't just settle for one counter measure, but use a lot of them.

Vrindavan

4:54 am on May 28, 2007 (gmt 0)

10+ Year Member



>> a better captcha

sorry
what is this?

eelixduppy

5:11 am on May 28, 2007 (gmt 0)



>> what is this?

[recaptcha.net...]

rogerd

5:59 pm on May 28, 2007 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



IP banning is still effective for unsophisticated users with persistent IPs. Cable users often keep the same IP for quite a while if they don't work to change it. If the IP ban works for a few days, that's often long enough for the malefactor to lose interest.

Sophisticated users have a zillion ways to get around an IP ban. As I've mentioned in the past, another approach is a "global ignore" for a problem user, called "Coventry" in vBulletin. The user keeps posting normally, but nobody can see the posts. If the member logs out, or logs in as a different name, he'll see what's happening, so it only works for those users who use a single member ID. It's satisfying when it does work, though, and the problem member keeps talking to nobody for weeks.:)

It says something about the personality of these members when they keep spouting for dozens of posts without any acknowledgement (or argument) from other members - clearly, they like to hear themselves talk and are oblivious to anyone else.

thecoalman

5:18 am on May 30, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



There's numerous mods available on phpbb's site to prevent spam. The most effective one is the one that asks a question, impossible for a bot to circumvent. I was getting about 2 or 3 spam registrants a day and tried many of the mods but since installing that one have had 0 spam registrants in about 6 months or longer.

I believe there is a few similar mods like this but the one I use adds a configuration in ACP where you can add and delete questions. Keep it simple, I simply have a paragraph that I added to the registration form with a underlined word and ask the registrant to type in the underlined word.