Upcoming Games

(UTC times)


Full list
Add a game

Upcoming Events

No events to display

Relatively easy way to block an unwanted connection IP address

You are here: Home > Forum > Hosting and Events > Hosting General Topics > Relatively easy way to block an unwanted connection IP address

Page 1 of 1

Relatively easy way to block an unwanted connection IP address 07/05/2016 at 21:26 #82193
belly buster
Avatar
368 posts
After seeing some shenanigans tonight with an errant connection, here is a fairly easy and quick way to block a specific IP address for good.

Assuming windows firewall is on and running (it is by default), the at an elevated command line run:

netsh advfirewall firewall add rule name="IP Block" dir=in interface=any action=block remoteip=<put dodgy IP here>/32

To get an elevated command line, press start, type cmd, and then right click on cmd.exe and select run as administrator.

Log in to reply
The following user said thank you: Finger
Relatively easy way to block an unwanted connection IP address 07/05/2016 at 21:45 #82194
Gwasanaethau
Avatar
509 posts
I have no idea what this post is in response to (I assume it is a multiplayer issue), but I would just add that once the session has finished I would delete that rule again.

Most computers connect to the Internet via DHCP, so their IP address gets recycled periodically. Thus, the offending connection will almost certainly have a new IP address within 24 hours (if not before), and leaving the rule in place could (very small chance, admittedly) coincidentally block someone else that happens to be given that IP address in the future.


Log in to reply
Relatively easy way to block an unwanted connection IP address 08/05/2016 at 08:29 #82199
belly buster
Avatar
368 posts
To put it into context, last night's hosted game was aborted twice because of a port probe attack on the host's IP address and port. There was a line of thought that this was deliberately targeted from the details in the forum.

It would be very unlikely that the errant IP address is then legitimately allocated to a genuine user, however if you are one for tidying up, the rule can be deleted with

netsh advfirewall firewall delete rule name="IP Block" dir=in remoteip=<dodgy IP>/32

Log in to reply
Relatively easy way to block an unwanted connection IP address 08/05/2016 at 09:45 #82200
Finger
Avatar
220 posts
" said:
Most computers connect to the Internet via DHCP, so their IP address gets recycled periodically. Thus, the offending connection will almost certainly have a new IP address within 24 hours (if not before)
Actually, this is not true - eg. I'm also getting IP address by DHCP and my IP address hasn't changed in years. It works for other people hosting, too (so you can guess their IP address beforehand). In fact, it's the sanest thing the ISP could do.

Log in to reply
Relatively easy way to block an unwanted connection IP address 08/05/2016 at 10:32 #82201
headshot119
Avatar
4869 posts
" said:
" said:
Most computers connect to the Internet via DHCP, so their IP address gets recycled periodically. Thus, the offending connection will almost certainly have a new IP address within 24 hours (if not before)
Actually, this is not true - eg. I'm also getting IP address by DHCP and my IP address hasn't changed in years. It works for other people hosting, too (so you can guess their IP address beforehand). In fact, it's the sanest thing the ISP could do.
It'll vary by ISP as to when; or if you ever, get given a new IP address. There's not really a right or wrong about it.

On the other hand I pay at home and uni for a fixed IP address at each location.

"Passengers for New Lane, should be seated in the rear coach of the train " - Opinions are my own and not those of my employer
Log in to reply
Relatively easy way to block an unwanted connection IP address 08/05/2016 at 11:39 #82205
Finger
Avatar
220 posts
" said:
" said:
" said:
Most computers connect to the Internet via DHCP, so their IP address gets recycled periodically. Thus, the offending connection will almost certainly have a new IP address within 24 hours (if not before)
Actually, this is not true - eg. I'm also getting IP address by DHCP and my IP address hasn't changed in years. It works for other people hosting, too (so you can guess their IP address beforehand). In fact, it's the sanest thing the ISP could do.
It'll vary by ISP as to when; or if you ever, get given a new IP address. There's not really a right or wrong about it.
Yes, it'll vary. But the statement that "most computers' ... address gets recycled periodically" is simply wrong, at least in the context of home users (doesn't pertain to mobile or dial-up). It's also the most logical thing to happen. The impression that "DHCP addresses are almost next to random" is simply unfounded.

" said:

On the other hand I pay at home and uni for a fixed IP address at each location.

Well, good for you! However, it is totally irrelevant - I don't pay for any such thing. And yes, my ISP offers it as well.

Not to mention that the "offending" IP in question was actually a server, whose address, as witnessed by Google searches, hasn't also changed in years. And that calling sending a few packets (3) "attack" is a bit of making a storm in a teapot.

Log in to reply
Relatively easy way to block an unwanted connection IP address 08/05/2016 at 16:39 #82212
Gwasanaethau
Avatar
509 posts
" said:
" said:
Most computers connect to the Internet via DHCP, so their IP address gets recycled periodically. Thus, the offending connection will almost certainly have a new IP address within 24 hours (if not before)
Actually, this is not true - eg. I'm also getting IP address by DHCP and my IP address hasn't changed in years. It works for other people hosting, too (so you can guess their IP address beforehand). In fact, it's the sanest thing the ISP could do.

I stand corrected. In my personal experience my IP address (well, the router’s IP address) got recycled fairly regularly and I must’ve extrapolated that too far.

Log in to reply
Relatively easy way to block an unwanted connection IP address 10/05/2016 at 12:17 #82237
MarkC
Avatar
1105 posts
In reguards to changing IP's I think that those who use telephone based broadband (ie: in the uk it is provided mainly by BT phonelines, reguardless who the service provider is talk talk, sky etc ) they are the ones that tend to change more often.

As I use cable (virgin media) and I have found that I tend to keep the same IP for very long periods of time.

If a user uses mobile broadband or a wifi hotspot then in almost all cases the IP will be different every time.

Although that doesn't take into account people using IP masking techniques.

Log in to reply