| Re: Security - IP Logging [message #35110 is a reply to message #35108] |
Fri, 08 December 2006 16:05   |
Ernesto
Messages: 413
Registered: August 2005
Karma:
|
Senior Member |
|
|
| Quote: |
As far as searching by IP, this is already possible if you click on the user's IP beside their message it'll bring you a dialog allowing you to search by IP or search what IPs a given login was using (based on IPs as stored during message posting).
|
Yes, but what if this user (like most) have a dynamic IP, which switches range very often. I notice trouble from a user on my other services and shut down his access. Without keeping track of users IPs upon login, there is no way I can find him on the forum either, especially not if he registers many users on the forum, because, let's say this user never posted on the forum, or it was a long time ago he posted, etc.
Perhaps in the other service I provide, I find this user linked to multiple IPs, I run them across my forum as well (combined with all the other services) but I do not find it on the forum, because he hasnt posted while using any of those IPs - And hence, the malicious user is still "free to roam around" in the forums, while he is shut down, or banned from the rest.
Let's say I have a hacking attempt on my website (not all that uncommon) and I trace the IP's and I report to the police and block the IP in my system. - Now, his dynamic IP would allow him to still be able to access the forums, and continue his hacking attempt there, instead of for example the website, just because I (we) do not log IPs on the forums other than when a user posts a message. If we would have logged each of his login's on the forum, the chance would be significantly larger to catch him/her in the net.
I think Ilia, the fact that you do not see the need of such a thing, is that (to my knowledge) you do not run forums or sites that are directed to a 15-30 year crowd, nor a site where controversial discussions amongst computer interested script kiddies occur and hence, you never had the trouble of dealing with IP logs, banning users or being in contact with the lovelly FBI. Nor do you have hundreds of thousands of posts and thousands of users who deter down to a "Lord of the Flies" mentality as soon as they get on the net, where "everything goes" and real life pictures, or modified pictures are being tossed around, or spreading of child pornography, or well - You name it.
I think you are wrong - I think a forum administrator should have as many tools as possible to ensure that local and international laws are upheld on ones site, to prevent lawsuits or procecution.
I know I am using rather extreme examples, but you said you dont see a need to keep track of IPs "in all instances". - In all instances I can agree, but for example on just login would help quite a deal to identify users better.
And no, it does not store IPs upon registration, at least not on my forum, which is the latest release + several CVS'es - Not a single of the users with 0 posts have an IP stored.
Edit: If you don't WANT the function I can understand, don't get me wrong, I just don't understand how you cannot see the NEED for it. =)
Oh, merry christmas by the way!
Ginnunga Gaming
[Updated on: Fri, 08 December 2006 16:16] Report message to a moderator |
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]