Banning a range of ips
Posted: 18 Mar 2015, 08:12
A recent troublemaker inspired me to investigate netmask banning in SPADS.
Fortunately, I did not have to write a patch for this as there is some existing functionality. It is not well documented so I am posting about it here. You can ban an inclusive range of ips with the following syntax:
!ban ip=aa.bb.cc.dd-ww.xx.yy.zz
Note the hyphen to indicate a range.
Using this command you can ban entire subnets. This is useful if an offensive person uses DHCP to reacquire a new IP after being banned. Use with caution, as you can ban very wide subnets (or even the entire internet) with this command.
-MajorB
Fortunately, I did not have to write a patch for this as there is some existing functionality. It is not well documented so I am posting about it here. You can ban an inclusive range of ips with the following syntax:
!ban ip=aa.bb.cc.dd-ww.xx.yy.zz
Note the hyphen to indicate a range.
Using this command you can ban entire subnets. This is useful if an offensive person uses DHCP to reacquire a new IP after being banned. Use with caution, as you can ban very wide subnets (or even the entire internet) with this command.
-MajorB