Bans on real ips

[GeorgeGR]

Hello,

i would like to request a module for inspircd. I would like to disable the banning of ips. I mean this:

mode #channel +b *!*@1.2.3.4 or *!*@1.2.3.4/32 to be dissalowed and only made available the cloaked ips.

Thank you

[WindowsUser]

I just wonder why you would want this, since auto-cloaking (not vhosts) does not strictly completely hide someone's IP.

[TurkDesk]

they do hide at least, but by the IP's bening match when they are banned, it's little leak to find out ips, a little option to match/not much the IP's or work only cloak or IP too option would be handy.

[WindowsUser]

If IPs are cloaked, ordinary channel operators would not have any means of knowing someone's real IP address in order to set bans, unless they managed to decrypt the cloaking my m_cloaking.so, which is possible anyways.

The only way an ordinary channel operator could find out someone's IP address otherwise is to try to brute-force by setting a lot of bans. There are literally billions of IPv4 addresses and billions of billions of billions of billions of IPv6 addresses, making such brute-forcing impractical.

A module to implement this would be easy, but I just don't see the need for it.

[DjSlash]

I believe people already stated they don't see the use for this and thus not wanting to waste time on it. Only suggestion I would make is to write it yourself.

[satmd]

It does make sense when ircops help a chanop to provide a specific iprange to ban from that channel while not banning it from the complete net.

or for a channel which users all come from a specific subnet, it could be +iI 1.2.3.0/24

[GeorgeGR]

Well i wouldnt ask such a module if there was no reason or if i could write it on my own. There is an issue that Attila is aware of and hence i requested this module

[HelixSpiral]

Having unbanable IPs would effectively prevent banning on anyone connecting that has an ip that doesn't resolve to some sort of a host.

Yes. This may prevent users determining the IP of a user through trial and error ban/unban. But that is a much smaller risk than having unbanable bots connecting and spamming.

[GeorgeGR]

we have cloaking so only ircops can see ips. ircops never set bans on real ips and all ops set bans on cloaked. also ips dont resolve as far as i know

[HelixSpiral]

X.X.X.X -> <cloaked>.res.rr.com or something similar

But not all IPs will do that. So if you remove the ability to ban just the IP you have no way to ban the user.

[SadieCat]

@Shawn-Smith IPs which do not have RDNS can be cloaked too albeit in a different way.