ip blocking

batman

Is there a way to...Of course there is a way, php can do anything! 😉 Anyways, can someone point me in the direction of blocking out unwanted visitors to a site, using the first 3 parts of an ip. I would just do it with the ip, but so many people these days have dynamic ip addresses.

Thanks for any help!!
-Blake

Kudose

If you block just the XXX.XXX.XXX of an ip instead of XXX.XXX.XXX.XXX then anyone using that web provider will be blocked, not just who your trying to block.

You should keep that in mind.

batman

Well, like I said I only want to really block out two different ip's. But the problem is that I can't block by the full 4 sets of numbers because they have dynamic ip's. How would you guys go about doing this. Maybe there is another way besides ip??

Thanks,
-Blake

Kudose

If they obtain thier dynamic IPs through AOL, then you can block out just AOL users.

I dont recall the exact statement but it goes something like this

<?
if ($HTTP_GET_VARS['REMOTE_CLIENT_AGENT'] = 'aol') {

echo" go to aoHELL! ";

} else {

echo" proceed ";

}
?>

batman

Well, this is sort of what I want. When I go to this page, http://biolifedynamics.com/, I get this message:

Forbidden
You don't have permission to access / on this server.

Apache/1.3.11 Server at biolifedynamics.com Port 80

Try going to that page and tell me what you get.

Thanks,
-Blake

mcgruff

If you can identify a banned user attempting to re-register you could block the first-three bits of the IP temporarily - say an hour. This might not inconvenience others with same ISP (not on a small site anyway).

Can you get a cookie onto the banned user's machine? You could use this "ban control" cookie to block him. You don't need much hacker nous to work that one out but it might be worth a try.

Also, I read on a forum somewhere that you can use javascript to force a user's email program to email you: with their email address, you can send a suitable message about how some big, lumpy guys with baseball bats have obtained a full profile of the user. (Well, maybe not the baseball bat bit - guns might project a more professional image). That might scare them off, but could be ethically questionable since you're now effectively hacking into a user's machine.

keith73

Originally posted by batman
Is there a way to...Of course there is a way, php can do anything! 😉 Anyways, can someone point me in the direction of blocking out unwanted visitors to a site, using the first 3 parts of an ip. I would just do it with the ip, but so many people these days have dynamic ip addresses.

Thanks for any help!!
-Blake

There really is no way to do this without blocking WANTED visitors. PLUS, if the unwanted visitor uses a proxy, you probably won't even get their actual IP.

setting a cookie that blocks them is one solution. I worked on a site where there were 500,000 registered users. We actually set a cookie on 1 person's machine because they were trying to get into other people's accounts. He never came back, apparently he doesn't know how to delete cookies.

More knowledgeable folks will go right around that, but it may work on the less knowledgeable type.

keith

dev2761

do it this way:

To block an IP from your website, create a (text) file (if you don't already have one on your server) and name it ".htaccess". Put the following in that text file:

<Limit GET>
order allow,deny
allow from all
deny from 123.456.789.0
deny from 123.4.5.
</Limit>
replace the "123.456.789.0" with the IP you want to block. (you can have as many "deny from ..." lines as you want) the "123.4.5." will block a range of IPs.

If you want to have a custom 403 page (the page that people get when they're blocked) put these lines below what you have above:

ErrorDocument 403 http://www.YOURDOMAIN.COM/403.htm
(the 403.htm is the page that you've designed... maybe you want to give them an email address to reach to request access...)

You can also have a custom 404 page (page not found). So add this in there too:

ErrorDocument 404 http://www.YOURDOMAIN.COM/404.htm
again, the 404.htm page is one that you've created.

Now upload the .htacess file to your server. Wherever you put it - it will effect the current directory, and all its subdirectories. Also, the FULL file name is .htaccess - no other suffix there...

keith73

dev2761

that would only work if:
A) the site is on a linux/apache machine
😎 the blocked user has a static IP

If he puts in a range, he could block other users, not just the banned user.

batman never did mention what OS/web server he was running.

keith

jassh

yeah.. and what happen if the user you wanna block
uses ip spoof.. or sort of a proxy.. or an ip mask...

i mean, there is always a way to disguise your IP...
so i guess IP Blocking would bring more trouble that it solves..

unless you are thinking something like IRC
(which, by the way, people can still get around even though their IP got banned..)

my suggestion, (well a very simple one actually..)
is to make some sort of user login/access stuff..
than i guess you can simply banned someone
from it's user name/ip combo..

anyway, best of luck...
tell us if ya find a ny solution kay..
cheers;

-jassh

p/s: Actually, i was also wondering the same thing..
what OS/Platform does BATMAN uses eh??? anybody knows??

DeMiNe0

<? 
if ($HTTP_GET_VARS['REMOTE_CLIENT_ADRESS'] = '127.0.0.1') { 
echo("You are Banned"); 
} else { 
<?
PAGE HTML CODE HERE!!
?>
} 
?>

stolzyboy

Originally posted by keith73
dev2761
A) the site is on a linux/apache machine
- keith

actually to solve the "A" problem, you need to only be using Apache as the webserver, you can use .htaccess with windows boxes and any other server that is running apache

as far as the others, it's just a choice you have to make