Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: sky23 on February 09, 2017, 11:56:44 AM

Title: IVv6
Post by: sky23 on February 09, 2017, 11:56:44 AM
How to see the real IP of these strange "guests?"
Title: Re: IVv6
Post by: Illori on February 09, 2017, 12:06:00 PM
http://custom.simplemachines.org/mods/index.php?mod=3051
Title: Re: IVv6
Post by: sky23 on February 11, 2017, 06:06:23 AM
Yes, it shows the ipv6 adress then..if you click on the member name..
but...bann ip's is not working after you install this...so..not useful
should be most important for the developers that the admin see's
who is visiting him..right?
Title: Re: IVv6
Post by: Illori on February 11, 2017, 06:18:02 AM
then post in the mods support topic explaining the issues.
Title: Re: IVv6
Post by: Linkjay on February 11, 2017, 06:37:06 PM
You could consider disabling IPv6 support on your machine until SMF officially supports it. I did that on mine and everything works fine and now I can see everyone's IPs properly.
Title: Re: IVv6
Post by: sky23 on March 09, 2017, 08:09:56 AM
then you are lucky, it's disabled, but with what results? showing only...nothing, empty spaces by me, if someone uses ipv6 protocol
Title: Re: IVv6
Post by: Illori on March 09, 2017, 08:15:50 AM
then you need to install the mod linked above.
Title: Re: IVv6
Post by: Kindred on March 09, 2017, 08:21:35 AM
besides banning by IP is mostly useless anyway
Title: Re: IVv6
Post by: sky23 on March 09, 2017, 10:23:20 AM
useless? i don't think so, banning by whole ip range: xxx.xxx.xxx-255.*  is useless?
why so, Kindred?
Title: Re: IVv6
Post by: Arantor on March 09, 2017, 11:17:42 AM
Because the odds of you stopping the spammers are much slimmer than you think. And if the goal is to prevent miscreants from coming back, it's easy to get a new IP address, often as simple as resetting the router. Or getting any one of the many, many proxies out there.

And this problem will be much worse with IPv6, where it is possible to burn through new IP addresses at a ferocious rate.
Title: Re: IVv6
Post by: sky23 on March 09, 2017, 04:27:36 PM
spiders? bots? and other unwelcomes? i dont understand you here..sorry
Title: Re: IVv6
Post by: Arantor on March 09, 2017, 04:28:40 PM
You think you can ban spammers, spiders and bots faster than they can get new IP addresses? Interesting, but sadly wrong.
Title: Re: IVv6
Post by: Kindred on March 09, 2017, 04:48:54 PM
normal spiders.. maybe.... but you don't want to ban normal spiders.
non-normal spiders and other "unwelcomes"?
They'll have a new IP address in 10 seconds after they see that their IP is blocked.... if it's a bot, it might take a full minute to retest from a different IP/proxy.

seriously... banning by IP address is useless
Title: Re: IVv6
Post by: sky23 on March 11, 2017, 07:10:43 AM
Disagree absolutely!
I banned whole Ip Ranges, want to see my log? Maybe you are surprised..
And nobody wants to ban "normal" spiders? Baidoo, Yantex and friends are normal? sorry...i dont think so!
Privacy should be the goal, not the developers "opinions" about that...
The choice for the Admin as he wish..thats my opinion!
I ban all kind of Spiders, successful, you bet!
And let me tell you, there are really nasty ones out there, like these nice guys, i would recommend each of you,
to ban these gangsters under all circumstances: http://www.guyellisrocks.com/2012/01/kintiskton-llc-ip-ranges.html
Title: Re: IVv6
Post by: Arantor on March 11, 2017, 09:08:24 AM
Depends on your audience. For sites with an audience in China, Baidu is a thing. For Russia, Yandex is a thing.

Privacy is not necessarily the end goal, depends on your site, and to a point, sharing knowledge is the opposite of privacy...
Title: Re: IVv6
Post by: Kindred on March 11, 2017, 11:25:39 AM
And...   using the SMF ban system to handle the bans of those ranges is also the wrong way to go about it.

If you really feel that you must ban an IP range, then use the DENY option in .htaccess - don't use the SMF ban system
Title: Re: IVv6
Post by: sky23 on March 11, 2017, 12:29:11 PM
Quote from: Arantor on March 11, 2017, 09:08:24 AM
Depends on your audience. For sites with an audience in China, Baidu is a thing. For Russia, Yandex is a thing.

Privacy is not necessarily the end goal, depends on your site, and to a point, sharing knowledge is the opposite of privacy...

We could talk endless, for what and why someone uses a forum. Somebody doesn't want to have uninvited "guests" even to see
a logo..others have a open and public forum.
It's about the choices, the admin has, with a forum.
Any yes! Me and many others do have this 'feel' to block whole ip-ranges, cause they simply want to be none-public!
Others not, so no problem.
And to mess around with htaccess? naaa..better not, have enough from crash's slowly
Title: Re: IVv6
Post by: Arantor on March 11, 2017, 12:34:36 PM
And that was the objection with your argument, you were telling us that we should follow how you do it...
Title: Re: IVv6
Post by: sky23 on March 11, 2017, 01:10:58 PM
haha, Arantor, i guess you are the Legend, i am the newbie only, maybe you tell us, user and newbie friendly, how to do a none-public one, right?
no offense meant, i know the opinion's slowly from the developers here, about such things, haha, no offense meant
Title: Re: IVv6
Post by: Kindred on March 11, 2017, 04:02:55 PM
Why not use .htaccess?   It's much more efficient than SMF's ban system, when it comes to banning by ip... and uses fewer resources.

Title: Re: IVv6
Post by: Caracal on March 11, 2017, 04:20:51 PM
If you had topics hidden from certain groups and guests can the spammers spiders or bots be able to get access to this even though they wouldn't be selected to view this content?
Title: Re: IVv6
Post by: Kindred on March 11, 2017, 05:10:01 PM
Ummmm... what?
Title: Re: IVv6
Post by: Caracal on March 12, 2017, 12:53:52 PM
Quote from: Kindred on March 11, 2017, 05:10:01 PM
Ummmm... what?
If you had a board with topics in it for example on my forum i have a board called Admin & Mods with topics only admin and mods can see and i'm 100 percent sure you have loads on this forum here as well you have certain groups and so on. What my point is can spammers spiders or bots who get on your forum and spam it gain access to these type of sections.
Title: Re: IVv6
Post by: Illori on March 12, 2017, 01:10:04 PM
if the permissions are set correctly on who can access those boards, spammers and bots cannot ever access those sections.
Title: Re: IVv6
Post by: Caracal on March 12, 2017, 01:19:02 PM
Quote from: Illori on March 12, 2017, 01:10:04 PM
if the permissions are set correctly on who can access those boards, spammers and bots cannot ever access those sections.
Ok thanks. Illori  :) Yes i have them set correctly as i created another account and done all the different groups like Newbie, Jr Member and so on.
Title: Re: IVv6
Post by: sky23 on March 13, 2017, 02:09:18 PM
Quote from: Caracal on March 12, 2017, 12:53:52 PM
Quote from: Kindred on March 11, 2017, 05:10:01 PM
Ummmm... what?
If you had a board with topics in it for example on my forum i have a board called Admin & Mods with topics only admin and mods can see and i'm 100 percent sure you have loads on this forum here as well you have certain groups and so on. What my point is can spammers spiders or bots who get on your forum and spam it gain access to these type of sections.

Yes, they can! If they go agressive to work,..and they will..
like  like this pig company: http://www.guyellisrocks.com/2012/01/kintiskton-llc-ip-ranges.html
They offer companies informations about Copyright infringement's, their spiders crawl the web 24/7 in a way, google is a little Kid against them..and there are many others like this "company"! A double layer Security would give a little bit more security, but also this is not 100% after.
Still No-Way to see IP's from these 0.0.0.0 "guests"...
Title: Re: IVv6
Post by: Kindred on March 13, 2017, 03:19:46 PM
NO THEY CAN NOT!! !! !!

please stop spreading FUD based on your misunderstanding of how they systems work.

If you have a section which is only visible to admins and moderators, based on group permissions, then guests and regular users CAN NOT SEE IT.
This inlcudes all search engines and bots, even if the bot registers as a user....

your information in the protected sections is SAFE from being scanned, as long as you have your permissions set correctly.

as for "double layer security" -- you really have no idea what you are talking about, do you?
(however, 2.1 does add 2FA; although I find 2FA to be obnoxious in most cases.)