RE: [hlds] IP Spoofing hlds server?

2005-06-14 Thread Napier, Kevin
usually threaning or admitions in emails coupled with Logs is enough to get the 
isp to at least send the user (or in some cases call the users) a nasty warning 
and flag the account.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Ned Haskin
Sent: Monday, June 13, 2005 5:47 PM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?


The ISP will accept firewall log files showing attacks, so if he really
does try to hack your server you can
send those to your ISP and his, I don't know about the emails, but if he
did attack they would show premeditation.

Ned

Rick Payton wrote:

Call his ISP and ask? And call the authorities and ask? If anything, the
a-mail might actually help. His ISP can ask your ISP for a copy of the
message maybe? I don't know, here at work we archive all messages, I'm
not sure how ISP's handle their e-mail. Plus people would probably freak
if they knew their ISP kept copies of all their personal e-mail. Plus
people would probably freak if they knew their ISP kept copies of all
their personal e-mail.

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:42 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

If I could find something that his ISP would respect, I would, but I'm
not
sure that IM messages or email would be good enough. After all, anyone
could
fake an email/IM in an attempt to get revenge at someone.

Which brings up the question - what kind of evidences would ISPs accept?
What does it take to get the attention of an ISP or law enforcement?
This
person has bragged that he has hacked several Steam accounts, and has
threatened to hack mine. But all I have are server and IM logs.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Graham Robinson
Quite likely I suppose if it was a router at a cybercafe.

On 6/13/05, Ook [EMAIL PROTECTED] wrote:
 I did an analysis of my logs. The suspect always connects from
 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set
 of names. What is the chance that 4 different people can connect and somehow
 show up as being from the same IP? I banned all of them, hopefully end of
 story.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Graham Robinson
Just done a tracert and it is cpe-24-175-189-64.stx.res.rr.com which
is just someone's home internet on timewarners cable internet supply,
looks like in Texas.

On 6/13/05, Ook [EMAIL PROTECTED] wrote:
 I did an analysis of my logs. The suspect always connects from
 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set
 of names. What is the chance that 4 different people can connect and somehow
 show up as being from the same IP? I banned all of them, hopefully end of
 story.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Ned Haskin

it would be very easy to use the same ip, if you are in the same
building behind the same router.
Friends having a lan party, room mates, my ex-girlfriends 3 kids are
behind the same router.

Ned

Ook wrote:


I did an analysis of my logs. The suspect always connects from
24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set
of names. What is the chance that 4 different people can connect and somehow
show up as being from the same IP? I banned all of them, hopefully end of
story.



- Original Message -
From: Ned Haskin [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Sunday, June 12, 2005 7:46 AM
Subject: Re: [hlds] IP Spoofing hlds server?





It could be as simple them both using the same broadband connection for
steam.
While using a dialup box to im you which would have a different ip. As
in, they are both
in on it, ban the ip and let them sort it out with valve.

Ned

Kevin Ottalini wrote:




it doesn't have to be that complex ... they are just cooperating
together to
try and get the cousin unbanned.

All the good player has to do is let his bad cousin use his steam
account from the banned IP so it looks like
(effectively) they are both ip banned even though they are on
different ip -
and the good player just talks to you
(IM) normally from his normal ip address.

I personally would ban both of them.

- Original Message -
From: Ook [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Saturday, June 11, 2005 11:31 PM
Subject: [hlds] IP Spoofing hlds server?





Is it possible for someone to spoof an IP address when they connect to



a



server? One of my regulars IM'd me and said he could not connect to my
server. He gave me his steam account login to test it and I verified



his



steam account could connect to my server just fine. I had him go to
what
is
my ip address via google, and then had him hit my web server so I



could



verify his ip address - they were the same. He said he was still
banned. I
inspected my ban lists, and neither his steam id nor his ip address



were



in
them. Just to test, I removed a different IP address that belongs to
someone
that knows him that I recently banned (I think they are cousins or
something
like that) (it's a long story), and then he was able to connect. But
when
he
connected, he connected from the banned ip that I just unbanned, not



the



ip
he hit my web server with.

So - here is the confusion. I verify his ip address, but when he
connects,
it's from a different ip address. I think I'm being jerked around -
Either
he (or something somewhere) is somehow spoofing his ip address, or he



is



talking to me from one place, and he has his cousin (who was banned) on
the
phone and to make a long story short, they were trying to con me into
unbanning his cousin. So - is there any way he can IM from one address,
but
when he connects to my server, connect from a different ip address?




___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds




___
To unsubscribe, edit your list preferences, or view the list archives,



please visit:



http://list.valvesoftware.com/mailman/listinfo/hlds





___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds





___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread OoksServer

Supposedly, one is in Houston, the other in Austin. If they lived close
together, I'd buy it. What I discovered is that one person was masquerading
as 3 or 4 different people, using 3 or 4 different Steam IDs, but always
from the same IP address - it was the IP address that gave it all away, as
it is a residential account. After I banned him, he IM'd me several times
telling me about how he has hacked this or that steam account, and how he
was gong to hack my server and my network, etc. I ended up banning both of
them for trying to jerk me around. When in doubt, ban the lout.

- Original Message -
From: Ned Haskin [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Monday, June 13, 2005 12:32 PM
Subject: Re: [hlds] IP Spoofing hlds server?



it would be very easy to use the same ip, if you are in the same
building behind the same router.
Friends having a lan party, room mates, my ex-girlfriends 3 kids are
behind the same router.

Ned

Ook wrote:


I did an analysis of my logs. The suspect always connects from
24.175.189.64, and I found 4 different Steam IDs, each ID with a unique
set
of names. What is the chance that 4 different people can connect and
somehow
show up as being from the same IP? I banned all of them, hopefully end of
story.



- Original Message -
From: Ned Haskin [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Sunday, June 12, 2005 7:46 AM
Subject: Re: [hlds] IP Spoofing hlds server?





It could be as simple them both using the same broadband connection for
steam.
While using a dialup box to im you which would have a different ip. As
in, they are both
in on it, ban the ip and let them sort it out with valve.

Ned

Kevin Ottalini wrote:




it doesn't have to be that complex ... they are just cooperating
together to
try and get the cousin unbanned.

All the good player has to do is let his bad cousin use his steam
account from the banned IP so it looks like
(effectively) they are both ip banned even though they are on
different ip -
and the good player just talks to you
(IM) normally from his normal ip address.

I personally would ban both of them.

- Original Message -
From: Ook [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Saturday, June 11, 2005 11:31 PM
Subject: [hlds] IP Spoofing hlds server?





Is it possible for someone to spoof an IP address when they connect to



a



server? One of my regulars IM'd me and said he could not connect to my
server. He gave me his steam account login to test it and I verified



his



steam account could connect to my server just fine. I had him go to
what
is
my ip address via google, and then had him hit my web server so I



could



verify his ip address - they were the same. He said he was still
banned. I
inspected my ban lists, and neither his steam id nor his ip address



were



in
them. Just to test, I removed a different IP address that belongs to
someone
that knows him that I recently banned (I think they are cousins or
something
like that) (it's a long story), and then he was able to connect. But
when
he
connected, he connected from the banned ip that I just unbanned, not



the



ip
he hit my web server with.

So - here is the confusion. I verify his ip address, but when he
connects,
it's from a different ip address. I think I'm being jerked around -
Either
he (or something somewhere) is somehow spoofing his ip address, or he



is



talking to me from one place, and he has his cousin (who was banned) on
the
phone and to make a long story short, they were trying to con me into
unbanning his cousin. So - is there any way he can IM from one address,
but
when he connects to my server, connect from a different ip address?




___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds




___
To unsubscribe, edit your list preferences, or view the list archives,



please visit:



http://list.valvesoftware.com/mailman/listinfo/hlds





___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds





___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


RE: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Rick Payton
If you still have that e-mail you should notify the authorities and his
ISP. Maybe nothing will come of it, but who knows, maybe something will
(like losing his RR connection - hey I can dream right?) :)

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:06 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

Supposedly, one is in Houston, the other in Austin. If they lived close
together, I'd buy it. What I discovered is that one person was
masquerading
as 3 or 4 different people, using 3 or 4 different Steam IDs, but always
from the same IP address - it was the IP address that gave it all away,
as
it is a residential account. After I banned him, he IM'd me several
times
telling me about how he has hacked this or that steam account, and how
he
was gong to hack my server and my network, etc. I ended up banning both
of
them for trying to jerk me around. When in doubt, ban the lout.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread OoksServer

If I could find something that his ISP would respect, I would, but I'm not
sure that IM messages or email would be good enough. After all, anyone could
fake an email/IM in an attempt to get revenge at someone.

Which brings up the question - what kind of evidences would ISPs accept?
What does it take to get the attention of an ISP or law enforcement? This
person has bragged that he has hacked several Steam accounts, and has
threatened to hack mine. But all I have are server and IM logs.

- Original Message -
From: Rick Payton [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Monday, June 13, 2005 1:23 PM
Subject: RE: [hlds] IP Spoofing hlds server?



If you still have that e-mail you should notify the authorities and his
ISP. Maybe nothing will come of it, but who knows, maybe something will
(like losing his RR connection - hey I can dream right?) :)

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:06 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

Supposedly, one is in Houston, the other in Austin. If they lived close
together, I'd buy it. What I discovered is that one person was
masquerading
as 3 or 4 different people, using 3 or 4 different Steam IDs, but always
from the same IP address - it was the IP address that gave it all away,
as
it is a residential account. After I banned him, he IM'd me several
times
telling me about how he has hacked this or that steam account, and how
he
was gong to hack my server and my network, etc. I ended up banning both
of
them for trying to jerk me around. When in doubt, ban the lout.

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


RE: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Rick Payton
Call his ISP and ask? And call the authorities and ask? If anything, the
a-mail might actually help. His ISP can ask your ISP for a copy of the
message maybe? I don't know, here at work we archive all messages, I'm
not sure how ISP's handle their e-mail. Plus people would probably freak
if they knew their ISP kept copies of all their personal e-mail. Plus
people would probably freak if they knew their ISP kept copies of all
their personal e-mail.

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:42 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

If I could find something that his ISP would respect, I would, but I'm
not
sure that IM messages or email would be good enough. After all, anyone
could
fake an email/IM in an attempt to get revenge at someone.

Which brings up the question - what kind of evidences would ISPs accept?
What does it take to get the attention of an ISP or law enforcement?
This
person has bragged that he has hacked several Steam accounts, and has
threatened to hack mine. But all I have are server and IM logs.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread Ned Haskin

The ISP will accept firewall log files showing attacks, so if he really
does try to hack your server you can
send those to your ISP and his, I don't know about the emails, but if he
did attack they would show premeditation.

Ned

Rick Payton wrote:


Call his ISP and ask? And call the authorities and ask? If anything, the
a-mail might actually help. His ISP can ask your ISP for a copy of the
message maybe? I don't know, here at work we archive all messages, I'm
not sure how ISP's handle their e-mail. Plus people would probably freak
if they knew their ISP kept copies of all their personal e-mail. Plus
people would probably freak if they knew their ISP kept copies of all
their personal e-mail.

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:42 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

If I could find something that his ISP would respect, I would, but I'm
not
sure that IM messages or email would be good enough. After all, anyone
could
fake an email/IM in an attempt to get revenge at someone.

Which brings up the question - what kind of evidences would ISPs accept?
What does it take to get the attention of an ISP or law enforcement?
This
person has bragged that he has hacked several Steam accounts, and has
threatened to hack mine. But all I have are server and IM logs.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds





___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


[OT] [hlds] IP Spoofing hlds server?

2005-06-13 Thread OoksServer

This is a bit OT - but I used to work for a conpany that provided people
finding services. We had massive databases going back 20 years that
contained name, address, divorce, bankruptcy, and business information. If I
was a subscriber to these databases (and it is cheap and easy to become one)
and if you were to give me your last name and phone number or address, and
I'll tell you your name, SSN, and every address you have lived at for the
last 20 years, and the same information for your relatives and neighbors,
and your marraiges and divorces and bankruptcy filings and everytime you got
evicted from your home. People would freak if they realized what kind of
public records are being kept, or how easy it was to get it. Worried about
Uncle Sam watching? Hell, the private sector puts Uncle Sam to shame with
the records they keep on people. Privacy? Privacy is a freakin' joke, there
is no privacy.

- Original Message -
From: Rick Payton [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Monday, June 13, 2005 1:51 PM
Subject: RE: [hlds] IP Spoofing hlds server?



Call his ISP and ask? And call the authorities and ask? If anything, the
a-mail might actually help. His ISP can ask your ISP for a copy of the
message maybe? I don't know, here at work we archive all messages, I'm
not sure how ISP's handle their e-mail. Plus people would probably freak
if they knew their ISP kept copies of all their personal e-mail. Plus
people would probably freak if they knew their ISP kept copies of all
their personal e-mail.

Rick Payton, IT Support
Morikawa  Associates
(808) 572-1745
http://www.mai-hawaii.com/

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
Sent: Monday, June 13, 2005 10:42 AM
To: hlds@list.valvesoftware.com
Subject: Re: [hlds] IP Spoofing hlds server?

If I could find something that his ISP would respect, I would, but I'm
not
sure that IM messages or email would be good enough. After all, anyone
could
fake an email/IM in an attempt to get revenge at someone.

Which brings up the question - what kind of evidences would ISPs accept?
What does it take to get the attention of an ISP or law enforcement?
This
person has bragged that he has hacked several Steam accounts, and has
threatened to hack mine. But all I have are server and IM logs.

___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-13 Thread artiecs
Forward the email to the 'abuse' people at his isp. If they do save copies
of outgoing email (which they probably do), and can look on their own system
and see that he sent it, there's no disputing the authenticity of it. If
that's the case then they might do something like yank his account etc.
Worst that can happen is you'll waste your time forwarding an email, so not
much to lose if you do.


- Original Message -
From: OoksServer [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Monday, June 13, 2005 4:42 PM
Subject: Re: [hlds] IP Spoofing hlds server?


 If I could find something that his ISP would respect, I would, but I'm not
 sure that IM messages or email would be good enough. After all, anyone
could
 fake an email/IM in an attempt to get revenge at someone.

 Which brings up the question - what kind of evidences would ISPs accept?
 What does it take to get the attention of an ISP or law enforcement? This
 person has bragged that he has hacked several Steam accounts, and has
 threatened to hack mine. But all I have are server and IM logs.

 - Original Message -
 From: Rick Payton [EMAIL PROTECTED]
 To: hlds@list.valvesoftware.com
 Sent: Monday, June 13, 2005 1:23 PM
 Subject: RE: [hlds] IP Spoofing hlds server?


  If you still have that e-mail you should notify the authorities and his
  ISP. Maybe nothing will come of it, but who knows, maybe something will
  (like losing his RR connection - hey I can dream right?) :)
 
  Rick Payton, IT Support
  Morikawa  Associates
  (808) 572-1745
  http://www.mai-hawaii.com/
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer
  Sent: Monday, June 13, 2005 10:06 AM
  To: hlds@list.valvesoftware.com
  Subject: Re: [hlds] IP Spoofing hlds server?
 
  Supposedly, one is in Houston, the other in Austin. If they lived close
  together, I'd buy it. What I discovered is that one person was
  masquerading
  as 3 or 4 different people, using 3 or 4 different Steam IDs, but always
  from the same IP address - it was the IP address that gave it all away,
  as
  it is a residential account. After I banned him, he IM'd me several
  times
  telling me about how he has hacked this or that steam account, and how
  he
  was gong to hack my server and my network, etc. I ended up banning both
  of
  them for trying to jerk me around. When in doubt, ban the lout.
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-12 Thread Ned Haskin

It could be as simple them both using the same broadband connection for
steam.
While using a dialup box to im you which would have a different ip. As
in, they are both
in on it, ban the ip and let them sort it out with valve.

Ned

Kevin Ottalini wrote:


it doesn't have to be that complex ... they are just cooperating
together to
try and get the cousin unbanned.

All the good player has to do is let his bad cousin use his steam
account from the banned IP so it looks like
(effectively) they are both ip banned even though they are on
different ip -
and the good player just talks to you
(IM) normally from his normal ip address.

I personally would ban both of them.

- Original Message -
From: Ook [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Saturday, June 11, 2005 11:31 PM
Subject: [hlds] IP Spoofing hlds server?



Is it possible for someone to spoof an IP address when they connect to a
server? One of my regulars IM'd me and said he could not connect to my
server. He gave me his steam account login to test it and I verified his
steam account could connect to my server just fine. I had him go to
what
is
my ip address via google, and then had him hit my web server so I could
verify his ip address - they were the same. He said he was still
banned. I
inspected my ban lists, and neither his steam id nor his ip address were
in
them. Just to test, I removed a different IP address that belongs to
someone
that knows him that I recently banned (I think they are cousins or
something
like that) (it's a long story), and then he was able to connect. But
when
he
connected, he connected from the banned ip that I just unbanned, not the
ip
he hit my web server with.

So - here is the confusion. I verify his ip address, but when he
connects,
it's from a different ip address. I think I'm being jerked around -
Either
he (or something somewhere) is somehow spoofing his ip address, or he is
talking to me from one place, and he has his cousin (who was banned) on
the
phone and to make a long story short, they were trying to con me into
unbanning his cousin. So - is there any way he can IM from one address,
but
when he connects to my server, connect from a different ip address?




___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds



___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-12 Thread Ook
I did an analysis of my logs. The suspect always connects from
24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set
of names. What is the chance that 4 different people can connect and somehow
show up as being from the same IP? I banned all of them, hopefully end of
story.



- Original Message -
From: Ned Haskin [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Sunday, June 12, 2005 7:46 AM
Subject: Re: [hlds] IP Spoofing hlds server?


 It could be as simple them both using the same broadband connection for
 steam.
 While using a dialup box to im you which would have a different ip. As
 in, they are both
 in on it, ban the ip and let them sort it out with valve.

 Ned

 Kevin Ottalini wrote:

  it doesn't have to be that complex ... they are just cooperating
  together to
  try and get the cousin unbanned.
 
  All the good player has to do is let his bad cousin use his steam
  account from the banned IP so it looks like
  (effectively) they are both ip banned even though they are on
  different ip -
  and the good player just talks to you
  (IM) normally from his normal ip address.
 
  I personally would ban both of them.
 
  - Original Message -
  From: Ook [EMAIL PROTECTED]
  To: hlds@list.valvesoftware.com
  Sent: Saturday, June 11, 2005 11:31 PM
  Subject: [hlds] IP Spoofing hlds server?
 
 
  Is it possible for someone to spoof an IP address when they connect to
a
  server? One of my regulars IM'd me and said he could not connect to my
  server. He gave me his steam account login to test it and I verified
his
  steam account could connect to my server just fine. I had him go to
  what
  is
  my ip address via google, and then had him hit my web server so I
could
  verify his ip address - they were the same. He said he was still
  banned. I
  inspected my ban lists, and neither his steam id nor his ip address
were
  in
  them. Just to test, I removed a different IP address that belongs to
  someone
  that knows him that I recently banned (I think they are cousins or
  something
  like that) (it's a long story), and then he was able to connect. But
  when
  he
  connected, he connected from the banned ip that I just unbanned, not
the
  ip
  he hit my web server with.
 
  So - here is the confusion. I verify his ip address, but when he
  connects,
  it's from a different ip address. I think I'm being jerked around -
  Either
  he (or something somewhere) is somehow spoofing his ip address, or he
is
  talking to me from one place, and he has his cousin (who was banned) on
  the
  phone and to make a long story short, they were trying to con me into
  unbanning his cousin. So - is there any way he can IM from one address,
  but
  when he connects to my server, connect from a different ip address?
 
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


[hlds] IP Spoofing hlds server?

2005-06-11 Thread Ook
Is it possible for someone to spoof an IP address when they connect to a
server? One of my regulars IM'd me and said he could not connect to my
server. He gave me his steam account login to test it and I verified his
steam account could connect to my server just fine. I had him go to what is
my ip address via google, and then had him hit my web server so I could
verify his ip address - they were the same. He said he was still banned. I
inspected my ban lists, and neither his steam id nor his ip address were in
them. Just to test, I removed a different IP address that belongs to someone
that knows him that I recently banned (I think they are cousins or something
like that) (it's a long story), and then he was able to connect. But when he
connected, he connected from the banned ip that I just unbanned, not the ip
he hit my web server with.

So - here is the confusion. I verify his ip address, but when he connects,
it's from a different ip address. I think I'm being jerked around - Either
he (or something somewhere) is somehow spoofing his ip address, or he is
talking to me from one place, and he has his cousin (who was banned) on the
phone and to make a long story short, they were trying to con me into
unbanning his cousin. So - is there any way he can IM from one address, but
when he connects to my server, connect from a different ip address?


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-11 Thread Kevin Ottalini

it doesn't have to be that complex ... they are just cooperating together to
try and get the cousin unbanned.

All the good player has to do is let his bad cousin use his steam
account from the banned IP so it looks like
(effectively) they are both ip banned even though they are on different ip -
and the good player just talks to you
(IM) normally from his normal ip address.

I personally would ban both of them.

- Original Message -
From: Ook [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Saturday, June 11, 2005 11:31 PM
Subject: [hlds] IP Spoofing hlds server?



Is it possible for someone to spoof an IP address when they connect to a
server? One of my regulars IM'd me and said he could not connect to my
server. He gave me his steam account login to test it and I verified his
steam account could connect to my server just fine. I had him go to what
is
my ip address via google, and then had him hit my web server so I could
verify his ip address - they were the same. He said he was still banned. I
inspected my ban lists, and neither his steam id nor his ip address were
in
them. Just to test, I removed a different IP address that belongs to
someone
that knows him that I recently banned (I think they are cousins or
something
like that) (it's a long story), and then he was able to connect. But when
he
connected, he connected from the banned ip that I just unbanned, not the
ip
he hit my web server with.

So - here is the confusion. I verify his ip address, but when he connects,
it's from a different ip address. I think I'm being jerked around - Either
he (or something somewhere) is somehow spoofing his ip address, or he is
talking to me from one place, and he has his cousin (who was banned) on
the
phone and to make a long story short, they were trying to con me into
unbanning his cousin. So - is there any way he can IM from one address,
but
when he connects to my server, connect from a different ip address?




___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] IP Spoofing hlds server?

2005-06-11 Thread Andrew Armstrong
His webserver IP may be a proxy server's IP.

- Original Message -
From: Ook [EMAIL PROTECTED]
To: hlds@list.valvesoftware.com
Sent: Sunday, June 12, 2005 4:31 PM
Subject: [hlds] IP Spoofing hlds server?


 Is it possible for someone to spoof an IP address when they connect to a
 server? One of my regulars IM'd me and said he could not connect to my
 server. He gave me his steam account login to test it and I verified his
 steam account could connect to my server just fine. I had him go to what
is
 my ip address via google, and then had him hit my web server so I could
 verify his ip address - they were the same. He said he was still banned. I
 inspected my ban lists, and neither his steam id nor his ip address were
in
 them. Just to test, I removed a different IP address that belongs to
someone
 that knows him that I recently banned (I think they are cousins or
something
 like that) (it's a long story), and then he was able to connect. But when
he
 connected, he connected from the banned ip that I just unbanned, not the
ip
 he hit my web server with.

 So - here is the confusion. I verify his ip address, but when he connects,
 it's from a different ip address. I think I'm being jerked around - Either
 he (or something somewhere) is somehow spoofing his ip address, or he is
 talking to me from one place, and he has his cousin (who was banned) on
the
 phone and to make a long story short, they were trying to con me into
 unbanning his cousin. So - is there any way he can IM from one address,
but
 when he connects to my server, connect from a different ip address?


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds