IP ban not good enough

[gilligan360]

Well on a my forum, i have a constant menace who keeps returning to our forums even after i give him IP bans!

Is there a way i can permantly ban him, i have heard something like a 'cookie ban' but i need information and help as im sick to death...

Thanks

[Edit: the site in question is www.se7ensins.com , which I've removed from your sig for AUP violations. Hope you understand (if not, see the AUP you agreed to :D). ~zipulrich]

[renegade600]

thats one of the problems with running a forum. You cannot really ban anyone who does not want to be ban. Theres plenty of ways to bypass a ban. If the person is harrassing contact his isp and complain.

[lufbra]

My suggestion would be to ban the email addresses used, they'll soon get fed up with having to create new email accounts.

[gilligan360]

he will definatly create a new email address...

[renegade600]

he will definatly create a new email address...
if he is using the same domain and if its a personal domain, maybe you can ban the domain.

[Snurfen]

give us his IP, me and Beanie will go around and sort him out, oh King of Humour (see Kukundu threat, OD, for details of our prowess) ;)

Plus, whats your forum's address?

[oracle128]

Find out where he lives (http://www.geobytes.com/IpLocator.htm?GetLocation).

[The Dude]

Sounds like he is using a proxy :(

Good luck in stopping him my friend :)

Why must there be people like this in the world??

[Decay]

All depending how badly you wish to prevent them from visiting your forum and your knowledge of a cgi language..

You could use a cgi script to detect if any open proxy's are detected at the remote host and deny access if there is one. This would block any user using one of the billion proxys used off the internet. Normal users that don't use a proxy wouldn't have any problems at all but would notice a log in thier firewall of being port scanned.

This works for most proxys another way is to check thier refering address... for your forums if it does not equal yours redirect to your homepage

This would halt most cgi based proxys

Good Luck....

"cookie ban" would just be setting a cookie on thier computer and checking if it exists if it does don't display the website... would need to use cgi also and its not effective since they could just delete all thier cookies

[Mr Bean]

give us his IP, me and Beanie will go around and sort him out, oh King of Humour (see Kukundu threat, OD, for details of our prowess) ;)

Plus, whats your forum's address?

Just digging out my big bat.

[The Dude]

Ah,he is in for it now huh??

:)

[degsy]

You could use a cgi script to detect if any open proxy's are detected at the remote host and deny access if there is one. This would block any user using one of the billion proxys used off the internet. Normal users that don't use a proxy wouldn't have any problems at all but would notice a log in thier firewall of being port scanned.
This is not a good idea at all. Many ISPs use Proxy or Cache servers to router their traffic.

This works for most proxys another way is to check thier refering address... for your forums if it does not equal yours redirect to your homepageThis is not a good idea because Firewalls, Internet Security and some browsers can disable the referrer.

[Decay]

This is not a good idea at all. Many ISPs use Proxy or Cache servers to router their traffic

Yes but the isp's that use proxy servers for caching don't allow just anyone to use them(example aol, netzero).... So a port scan would show no connection allowed which would allow the person to appear as they were not on a proxy...

Isp's that allow optional proxy's are no problem either cause the person could just disable the proxy for that webpage... They can't live with the fact that they are responsible for what they do on the webpage well maybe they don't deserve to be on the internet in the first place.

This is not a good idea because Firewalls, Internet Security and some browsers can disable the referrer.
True that the env variables within the browser can be tampared with but there is several ways around it...

I. If the web proxy uses a frame for your window.
a) Use java script to open window in top frame if it isn't
(Pro) If java script is enabled the window will open in top frame each time...
(Con) If java script is disabled the window won't open in top frame

II. If the web proxy uses a socket connection to read in your webpage.
a)Create a image that is required (like the images that test if your a human when signing up for boards.
(Pro) When the web proxy reads in the image your image will really be a link to a cgi program which can detect if the person is banned. If they are banned by checking by ip address (since with images the web proxy wouldn't be getting the image but the client of the banned user would have to) you could restrict them from viewing the image that is required for entering your webpage.
(Con) Legit users would have to enter a word or digit pharse everytime they wish to log on.
And there is likely hundereds of thousand of other ways....
Remember for every 10 hackers there is only one white hat hacker ;)
So to out think them ya have to think outside the box