FOSS gamedev and creative worlds

MCbans is a minecraft global banning system. servers that run the plugin when they ban a player, the players name is added to a database. When a player connects to another server running the same plugin, that server will also be notified of the fact the player was banned for another server IE griefing. it also has a reputation system so server can set up a minimum rep on there server meaning if a player has been banned from loads of servers and have a rep for example of 2 and they server minimum of 3rep, that player will not be able to connect. The issue with mintest is players can have as many account names as they like unlike mincraft were you have to buy an account. MCbans uses a name database witch would be useless in minetest. however there is an alternative to name ban, instead of a name database we could use an IP ban database.

chrisjose1913 wrote:however there is an alternative to name ban, instead of a name database we could use an IP ban database.

Since Internet service providers usually assign IP addresses to customers on a random basis on every (re-)connect this is useless.

Linuxdirk wrote:

chrisjose1913 wrote:however there is an alternative to name ban, instead of a name database we could use an IP ban database.

Since Internet service providers usually assign IP addresses to customers on a random basis on every (re-)connect this is useless.[/] I see your point, i was talking about the main I, that only changes once of twice a year, if your ISP changes it. but i am open to suggestions, is there any other unique ID on the client side ?

I don't know if the computers MAC address is exposed to Minetest at all when connecting to a server but if it is that could be used, though of course it is possible to spoof a MAC, though I'm not sure how many people actually know how to do that.

.

chrisjose1913 wrote:i was talking about the main I, that only changes once of twice a year, if your ISP changes it.

You mean the network address (determined by the IP address suffix)? If you put that on a ban list you’ll ban EVERYONE using that Internet service provider. This is nothing you want to do :)

chrisjose1913 wrote:but i am open to suggestions, is there any other unique ID on the client side ?

There isn’t.

Even a UUID can be tricked as long a s there is no central server-side registration of user names. Maybe server owners could work together to create a “whitelist web of trust” where users can register … But even with something like that: You can easily register another user name and start over gaining thrust.

Btw. the MAC address is nothing to rely on since it’s very simple to spoof it. Its possible even on Windows without using external tools. “The real burned in MAC” address is nothing that can be accessed. The system uses the MAC address that’s given by the network interface card. That value can be changed. The system only has access to this value (even on a low-level basis).

“The real burned in MAC“ address is something only the NIC has access to. And even that isn’t “burned in”. It’s possible to change it if you have write access to the NIC bios. A MAC address is are only a value in the internal NIC configuration and nothing that is burned in on the hardware (most NIC manufacturers have this value read-only on hardware basis though)