RE: [hlds] IP Spoofing hlds server?
usually threaning or admitions in emails coupled with Logs is enough to get the isp to at least send the user (or in some cases call the users) a nasty warning and flag the account. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ned Haskin Sent: Monday, June 13, 2005 5:47 PM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? The ISP will accept firewall log files showing attacks, so if he really does try to hack your server you can send those to your ISP and his, I don't know about the emails, but if he did attack they would show premeditation. Ned Rick Payton wrote: Call his ISP and ask? And call the authorities and ask? If anything, the a-mail might actually help. His ISP can ask your ISP for a copy of the message maybe? I don't know, here at work we archive all messages, I'm not sure how ISP's handle their e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:42 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
Quite likely I suppose if it was a router at a cybercafe. On 6/13/05, Ook [EMAIL PROTECTED] wrote: I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
Just done a tracert and it is cpe-24-175-189-64.stx.res.rr.com which is just someone's home internet on timewarners cable internet supply, looks like in Texas. On 6/13/05, Ook [EMAIL PROTECTED] wrote: I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
it would be very easy to use the same ip, if you are in the same building behind the same router. Friends having a lan party, room mates, my ex-girlfriends 3 kids are behind the same router. Ned Ook wrote: I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story. - Original Message - From: Ned Haskin [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Sunday, June 12, 2005 7:46 AM Subject: Re: [hlds] IP Spoofing hlds server? It could be as simple them both using the same broadband connection for steam. While using a dialup box to im you which would have a different ip. As in, they are both in on it, ban the ip and let them sort it out with valve. Ned Kevin Ottalini wrote: it doesn't have to be that complex ... they are just cooperating together to try and get the cousin unbanned. All the good player has to do is let his bad cousin use his steam account from the banned IP so it looks like (effectively) they are both ip banned even though they are on different ip - and the good player just talks to you (IM) normally from his normal ip address. I personally would ban both of them. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Saturday, June 11, 2005 11:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
Supposedly, one is in Houston, the other in Austin. If they lived close together, I'd buy it. What I discovered is that one person was masquerading as 3 or 4 different people, using 3 or 4 different Steam IDs, but always from the same IP address - it was the IP address that gave it all away, as it is a residential account. After I banned him, he IM'd me several times telling me about how he has hacked this or that steam account, and how he was gong to hack my server and my network, etc. I ended up banning both of them for trying to jerk me around. When in doubt, ban the lout. - Original Message - From: Ned Haskin [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Monday, June 13, 2005 12:32 PM Subject: Re: [hlds] IP Spoofing hlds server? it would be very easy to use the same ip, if you are in the same building behind the same router. Friends having a lan party, room mates, my ex-girlfriends 3 kids are behind the same router. Ned Ook wrote: I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story. - Original Message - From: Ned Haskin [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Sunday, June 12, 2005 7:46 AM Subject: Re: [hlds] IP Spoofing hlds server? It could be as simple them both using the same broadband connection for steam. While using a dialup box to im you which would have a different ip. As in, they are both in on it, ban the ip and let them sort it out with valve. Ned Kevin Ottalini wrote: it doesn't have to be that complex ... they are just cooperating together to try and get the cousin unbanned. All the good player has to do is let his bad cousin use his steam account from the banned IP so it looks like (effectively) they are both ip banned even though they are on different ip - and the good player just talks to you (IM) normally from his normal ip address. I personally would ban both of them. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Saturday, June 11, 2005 11:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
RE: [hlds] IP Spoofing hlds server?
If you still have that e-mail you should notify the authorities and his ISP. Maybe nothing will come of it, but who knows, maybe something will (like losing his RR connection - hey I can dream right?) :) Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:06 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? Supposedly, one is in Houston, the other in Austin. If they lived close together, I'd buy it. What I discovered is that one person was masquerading as 3 or 4 different people, using 3 or 4 different Steam IDs, but always from the same IP address - it was the IP address that gave it all away, as it is a residential account. After I banned him, he IM'd me several times telling me about how he has hacked this or that steam account, and how he was gong to hack my server and my network, etc. I ended up banning both of them for trying to jerk me around. When in doubt, ban the lout. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. - Original Message - From: Rick Payton [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Monday, June 13, 2005 1:23 PM Subject: RE: [hlds] IP Spoofing hlds server? If you still have that e-mail you should notify the authorities and his ISP. Maybe nothing will come of it, but who knows, maybe something will (like losing his RR connection - hey I can dream right?) :) Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:06 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? Supposedly, one is in Houston, the other in Austin. If they lived close together, I'd buy it. What I discovered is that one person was masquerading as 3 or 4 different people, using 3 or 4 different Steam IDs, but always from the same IP address - it was the IP address that gave it all away, as it is a residential account. After I banned him, he IM'd me several times telling me about how he has hacked this or that steam account, and how he was gong to hack my server and my network, etc. I ended up banning both of them for trying to jerk me around. When in doubt, ban the lout. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
RE: [hlds] IP Spoofing hlds server?
Call his ISP and ask? And call the authorities and ask? If anything, the a-mail might actually help. His ISP can ask your ISP for a copy of the message maybe? I don't know, here at work we archive all messages, I'm not sure how ISP's handle their e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:42 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
The ISP will accept firewall log files showing attacks, so if he really does try to hack your server you can send those to your ISP and his, I don't know about the emails, but if he did attack they would show premeditation. Ned Rick Payton wrote: Call his ISP and ask? And call the authorities and ask? If anything, the a-mail might actually help. His ISP can ask your ISP for a copy of the message maybe? I don't know, here at work we archive all messages, I'm not sure how ISP's handle their e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:42 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[OT] [hlds] IP Spoofing hlds server?
This is a bit OT - but I used to work for a conpany that provided people finding services. We had massive databases going back 20 years that contained name, address, divorce, bankruptcy, and business information. If I was a subscriber to these databases (and it is cheap and easy to become one) and if you were to give me your last name and phone number or address, and I'll tell you your name, SSN, and every address you have lived at for the last 20 years, and the same information for your relatives and neighbors, and your marraiges and divorces and bankruptcy filings and everytime you got evicted from your home. People would freak if they realized what kind of public records are being kept, or how easy it was to get it. Worried about Uncle Sam watching? Hell, the private sector puts Uncle Sam to shame with the records they keep on people. Privacy? Privacy is a freakin' joke, there is no privacy. - Original Message - From: Rick Payton [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Monday, June 13, 2005 1:51 PM Subject: RE: [hlds] IP Spoofing hlds server? Call his ISP and ask? And call the authorities and ask? If anything, the a-mail might actually help. His ISP can ask your ISP for a copy of the message maybe? I don't know, here at work we archive all messages, I'm not sure how ISP's handle their e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Plus people would probably freak if they knew their ISP kept copies of all their personal e-mail. Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:42 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
Forward the email to the 'abuse' people at his isp. If they do save copies of outgoing email (which they probably do), and can look on their own system and see that he sent it, there's no disputing the authenticity of it. If that's the case then they might do something like yank his account etc. Worst that can happen is you'll waste your time forwarding an email, so not much to lose if you do. - Original Message - From: OoksServer [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Monday, June 13, 2005 4:42 PM Subject: Re: [hlds] IP Spoofing hlds server? If I could find something that his ISP would respect, I would, but I'm not sure that IM messages or email would be good enough. After all, anyone could fake an email/IM in an attempt to get revenge at someone. Which brings up the question - what kind of evidences would ISPs accept? What does it take to get the attention of an ISP or law enforcement? This person has bragged that he has hacked several Steam accounts, and has threatened to hack mine. But all I have are server and IM logs. - Original Message - From: Rick Payton [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Monday, June 13, 2005 1:23 PM Subject: RE: [hlds] IP Spoofing hlds server? If you still have that e-mail you should notify the authorities and his ISP. Maybe nothing will come of it, but who knows, maybe something will (like losing his RR connection - hey I can dream right?) :) Rick Payton, IT Support Morikawa Associates (808) 572-1745 http://www.mai-hawaii.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of OoksServer Sent: Monday, June 13, 2005 10:06 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] IP Spoofing hlds server? Supposedly, one is in Houston, the other in Austin. If they lived close together, I'd buy it. What I discovered is that one person was masquerading as 3 or 4 different people, using 3 or 4 different Steam IDs, but always from the same IP address - it was the IP address that gave it all away, as it is a residential account. After I banned him, he IM'd me several times telling me about how he has hacked this or that steam account, and how he was gong to hack my server and my network, etc. I ended up banning both of them for trying to jerk me around. When in doubt, ban the lout. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
It could be as simple them both using the same broadband connection for steam. While using a dialup box to im you which would have a different ip. As in, they are both in on it, ban the ip and let them sort it out with valve. Ned Kevin Ottalini wrote: it doesn't have to be that complex ... they are just cooperating together to try and get the cousin unbanned. All the good player has to do is let his bad cousin use his steam account from the banned IP so it looks like (effectively) they are both ip banned even though they are on different ip - and the good player just talks to you (IM) normally from his normal ip address. I personally would ban both of them. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Saturday, June 11, 2005 11:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story. - Original Message - From: Ned Haskin [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Sunday, June 12, 2005 7:46 AM Subject: Re: [hlds] IP Spoofing hlds server? It could be as simple them both using the same broadband connection for steam. While using a dialup box to im you which would have a different ip. As in, they are both in on it, ban the ip and let them sort it out with valve. Ned Kevin Ottalini wrote: it doesn't have to be that complex ... they are just cooperating together to try and get the cousin unbanned. All the good player has to do is let his bad cousin use his steam account from the banned IP so it looks like (effectively) they are both ip banned even though they are on different ip - and the good player just talks to you (IM) normally from his normal ip address. I personally would ban both of them. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Saturday, June 11, 2005 11:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
[hlds] IP Spoofing hlds server?
Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
it doesn't have to be that complex ... they are just cooperating together to try and get the cousin unbanned. All the good player has to do is let his bad cousin use his steam account from the banned IP so it looks like (effectively) they are both ip banned even though they are on different ip - and the good player just talks to you (IM) normally from his normal ip address. I personally would ban both of them. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Saturday, June 11, 2005 11:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
Re: [hlds] IP Spoofing hlds server?
His webserver IP may be a proxy server's IP. - Original Message - From: Ook [EMAIL PROTECTED] To: hlds@list.valvesoftware.com Sent: Sunday, June 12, 2005 4:31 PM Subject: [hlds] IP Spoofing hlds server? Is it possible for someone to spoof an IP address when they connect to a server? One of my regulars IM'd me and said he could not connect to my server. He gave me his steam account login to test it and I verified his steam account could connect to my server just fine. I had him go to what is my ip address via google, and then had him hit my web server so I could verify his ip address - they were the same. He said he was still banned. I inspected my ban lists, and neither his steam id nor his ip address were in them. Just to test, I removed a different IP address that belongs to someone that knows him that I recently banned (I think they are cousins or something like that) (it's a long story), and then he was able to connect. But when he connected, he connected from the banned ip that I just unbanned, not the ip he hit my web server with. So - here is the confusion. I verify his ip address, but when he connects, it's from a different ip address. I think I'm being jerked around - Either he (or something somewhere) is somehow spoofing his ip address, or he is talking to me from one place, and he has his cousin (who was banned) on the phone and to make a long story short, they were trying to con me into unbanning his cousin. So - is there any way he can IM from one address, but when he connects to my server, connect from a different ip address? ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds