i have a problem with client

[topman96]

can any one advise i think i have a problem with a client right i have a dreambox800 and have a few sharesbut i have recently had a new client who is causing me concern i will say its on my box to keep it simple butit is on my fathers box
any way he has a nline which he pays for for uk so very body else here shares with he puts this 0963:0:0, in the fline which he has for every body else he shares with so i would then think that no one can recive uk from him but i have found one of his clients useing his 0963:0:0, even though it has been blocked is this possible and how is it been done
thanks

[mirny]

Re: i have a problem with client

Ban that IP straight in your router

[topman96]

Re: i have a problem with client

so it is possible

[cisko]

Re: i have a problem with client

Ban IP is a little use because wrong user can change his IP address using some programs, proxy, or simple because he use a connection that not provide him a static IP address.

Simpler add correct IP or name provided by a free dynamic DNS service to your allowed list.
What software are you using, Oscam, CCcam, Newcamd, etc? Many of these can also bind IP/DNS name to user.

So, at the end, do not create a "black list" that is a little use but create a "white list" for allowed machine.

[topman96]

Re: i have a problem with client

i use cccam if i just remove him from cccam.cfg will that do the trick
thanks

[peremacedonia]

Re: i have a problem with client

it will try to conect check warning.cfg file

[microchick]

Re: i have a problem with client

Change the port number
Change username and password

Ban the IP would not work if they are using a dynamic ip.
May be try to ban the mac address of their box

[cisko]

Re: i have a problem with client

i use cccam if i just remove him from cccam.cfg will that do the trick
thanks

With this:

F: USER PASS} 3 0 0 { 0:0:1 } { } { } [B]client_ip[/B]

set-up 3 0 0 0 and {0:0:1} as you like.
client_ip is or ip of your client or dynamic dns name, dynamic dns name is similar to: myname.no-ip.org or myname.dyndns.org

[mirny]

Re: i have a problem with client

and is there a chance to ban ip straight in oscam, because i can§t find it.
is it already implemented, or it will be in some new builds?
because for banning i'm using just command failban.

[microchick]

Re: i have a problem with client

Some of the providers come with an IP, each time you restart the router, it gets a new IP.
Ban the username would do the trick, because whichever ip they use they would be still logging in with their username.

[herrr]

Re: i have a problem with client

Some of the providers come with an IP, each time you restart the router, it gets a new IP.
Ban the username would do the trick, because whichever ip they use they would be still logging in with their username.

I think that's the easiest way, 'cause IP means really nothing...
Anyway I was wondering if someones hammering, trying to enter with a wrong username, can damage server performances.
Just curiosity.

[spanky_1209]

Re: i have a problem with client

The strongest protection for you problem is to use password and username .

IP address can be simulated easy on the PC, but when you give a user username and password that's the only way he can connect. Every other protection can be easy bypassed.

[microchick]

Re: i have a problem with client

Specially if they are using a 3G router. Every time they log in, the IP will be different.

[digicon]

Re: i have a problem with client

If using Oscam use fail2ban this will ban IP and Username password for however long you specify 1day,1week 1year if you so deem to.

If using CCcam on your box then its not so easy, if you ran a server you could again use fail2ban or iptables but the easist way is to keep banning the IP address in your router even if dynamic just keep an eye out.

The more extreme way is to change your port number and even your dns and just tell your trusted peers and you wont have a problem anymore

[cisko]

Re: i have a problem with client

and is there a chance to ban ip straight in oscam, because i can§t find it.
is it already implemented, or it will be in some new builds?
because for banning i'm using just command failban.

You have a per-user failban option in oscam for creating a blacklist.
If you would create a whitelist (better in my opinion) every user has hostname field, write there allowed ip or dyndns name.