-=*MAC Address Ban*=-

E=mcÂ² · Post by **E=mcÂ²** » 2003-04-02 14:30

Is there any script wich bans the users MAC address? It would be extremly usefull and the user can be "stronger" banned...

Sedulus · Post by **Sedulus** » 2003-04-02 15:20

AFAIK there is no way to find out the users mac address, unless he runs a service that exposes it.

if you try to get an arp-reply from someone beyond your subnet, you'll get the MAC address of the gateway/bridge that connects your subnet with the rest of the internet.

(correct me if I'm wrong here)

mo · Post by mo » 2003-04-02 20:22

that sounds right to me

[A&AM]Fireball · Post by **[A&AM]Fireball** » 2003-04-03 07:13

finding the MAC adress through any type of router is technically impossible

Brian · Post by **Brian** » 2003-04-07 03:09

It is i have a router the only wayto get the MAC addressis to access for that youmust be on the routers network

Post by **GargoyleMT** » 2003-04-07 18:45

NetBIOS over TCP/IP is one of those services that will expose your ethernet address, AFAIK. nbtstat. Of course anyone who isn't firewalling 137:139 is an idiot.

Phantom · Post by **Phantom** » 2003-04-17 03:17

Ok, well I was just coming here to ask this exact question.
Since it can't be done, any ideas on a way to maybe I.D. clients? Give each an I.D. number that you can ban or something?

sarf · Post by **sarf** » 2003-04-17 09:04

Ehm... <cough cough>... wouldn't the clients be stupid if they identify themselves?

That said, what you can do to identify clients is to either

save their hublist then use that to compare when new users connect (downloading their hublist and comparing with the saved ones, if they match to (75-90) percent then kickban the user)
save the path and size of, say, five files - check to see if they are present in any new users share (much faster but will give false positives)
save a hash of the hublist and compare that (fast but requires download of the hublist and can be defeated by moving as little as one shared file - almost no chance (depending on the hashing algorith) of false positives)
save the size of the hublist and using that (very, very fast, will however give false positives and is easy to defeat).

These are just some ideas, feel free to come up with your own.

Sarf
---
Everything in excess! To enjoy the flavor of life, take big bites.

E=mcÂ² · Post by **E=mcÂ²** » 2003-04-28 15:52

DC++

-=MAC Address Ban=-

-=MAC Address Ban=-

Who is online