synac-chat / synac-legacy

Some IRC-like chat application that might become good one day
11 stars 1 forks source link

How do we prevent the server owner from getting IP banned? #4

Closed tbodt closed 6 years ago

ttofis commented 6 years ago

Told you already my solution to this: Username/ID bans: Disallow owner. IP bans: Allow the addition and removal of ip bans from the server console, do not force the use of sql to users. Actually, the server should really get some more input features...

jD91mZM2 commented 6 years ago

Yes, that is one solution.

jD91mZM2 commented 6 years ago

I say we should do this like Minecraft, being user bans are different than ip bans. So when you ban a user, no ip is banned with him. If now the server owner wants to ban his ip, that's ok too, but it should be a completely different thing.

Quoting @ELChris414 from #9.

Vote up or down.

ttofis commented 6 years ago

Well that isn't directly related, but yeah.

jD91mZM2 commented 6 years ago

It is, though. Not automatically banning the IP would result in the server owner never accidentally banning themselves

ttofis commented 6 years ago

Well in that sense sure!! But take notice of the previous comment I made too, its important too for this issue to be resolved.

jD91mZM2 commented 6 years ago

Idea: Simply don't ban the user by IP if it shares IP with the owner. It's not perfect, but it's the best I can come up with.

ttofis commented 6 years ago

You have to change mindset by the way, you don't ban a user by his IP. You ban an IP which happens to stop a user. Also sure, although this doesn't resolve public networks but let's hope he uses a vpn too..

jD91mZM2 commented 6 years ago

"You can't log in here. And in case you feel like making a new account, you can't, because I'm banning your entire home too. No escape. Unless proxy and new account."

ttofis commented 6 years ago

λολ

ttofis commented 6 years ago

@jD91mZM2 I thought we solved this issue

jD91mZM2 commented 6 years ago

What did we decide? Keep separate /ban-ip command? Keep IP ban config file?

ttofis commented 6 years ago

Seperate /ban-ip that gets stored in banned file, so if it happens to be the owner, he can remove that easily.

jD91mZM2 commented 6 years ago

@tbodt @bela333 @Mnpn03 @inferiormartin calling all forces

tbodt commented 6 years ago

server owner has access to the console and can manually unban themself if needed

ttofis commented 6 years ago

Sadly, although I suggested it already, there isn't a console to the server.

jD91mZM2 commented 6 years ago

@tbodt said in a voice chat that he thinks I should put a timeout on connections before they log in, and move the ban check their. So to completely ban an IP to not even be able to open a connection, the server owner should use the firewall of doom

tbodt commented 6 years ago

do the ip ban check after they log in, that is

jD91mZM2 commented 6 years ago

Because of the fact that there isn't a way to get somebody's IP and because simplicity is good, I'm going to have to choose tbodt's idea on this one.

ttofis commented 6 years ago

Agreed...