[Mod] Extended Ban v2 [xban2]

[kaeza]

Extended Ban Mod for Minetest

This mod attempts to be an improvement to Minetest's ban system.

• It supports normal bans and temporary bans (from 60 seconds up to the end of time, with 1 second granularity).
• Records and joins all accounts using the same IP address and several IP addresses using the same name into a single record, and can ban/unban them as a single user.
• Can ban offline players if you know their IP or username.
• Holds a record of bans for each user, so moderators and administrators can consult it to know if a player is a repeat offender.
• Does not modify the default ban database in any way (`ipban.txt').
• Has an API to ban and check the ban database to allows other mods to manage users (for example, anticheat mods).

Usage
Install the mod as always and rename to `xban2'.

The mod provides the following chat commands:

Code: Select all

/xban <player_or_ip> <reason>

Ban a player permanently.

Code: Select all

/xtempban <player_or_ip> <time> <reason>

Ban a player temporarily. The syntax for `<time>' is:

• 1s - Ban for one second.
• 1m - Ban for one minute.
• 1h - Ban for one hour.
• 1D - Ban for one day (24 hours).
• 1W - Ban for one week (7 days).
• 1M - Ban for one month (30 days).
• 1Y - Ban for one year (360 days).

Values can be combined. For example "1D3h3m7s" will ban for 1 day, 3 hours, 3 minutes, and 7 seconds.
Note that the units are just for convenience. You are not required to provide values within the bounds. It is possible to specify "3600s", which is the same as "60m" or "1h". Also note that the 's' is optional. Specifying just "42" is the same as "42s".

Code: Select all

/xunban <player_or_ip>

Unban a player.

Advanced Use

Code: Select all

/xban_record <player_or_ip>

See a player's ban record.

Code: Select all

/xban_dbi <importer>

Import a database. Valid values for `<importer>' are:

• "minetest" - Import ban list from `ipban.txt' (Minetest ban database).
• "v1" - Import ban list from `players.iplist' (xban v1 database).

All commands except for `/xban_dbi' require `ban' privilege to execute. The `/xban_dbi' command requires `server' privilege.

License: BSD 2 Clause License.
Dependencies: None.

Links
Download .zip
Download .tar.gz
Browse code on Github

[LazyJ]

Is this compatible with the previous version of "xban's" files, kaeza?

[kaeza]

Is this compatible with the previous version of "xban's" files, kaeza?

Not currently. I'm working on providing converters from MT's ipban.txt, old xban v1 `players.iplist', and newer `players.iplist.v2' formats, along with more utilities.

BTW, for those who used my old xban mod, the advantages of this one are:

• Has a saner DB format (using a minetest.(de)serialize-compatible format.
• Fixes an old bug where some users were not actually getting banned under some circumstances.
• As said above, ban record :)
• It's title says v2! so it must be better than v1! the internet said it, so it must be true!

[Krock]

*shuts down server*
*installs*

[kaeza]

*BUMP*

LazyJ: Added command to import old v1 DB and Minetest `ipban.txt'.

[kaeza]

Update:

• Added `/xban_record' command to list players' ban records.
• The mod now saves the last position of the banned player (if they are online). The `/xban_record' command also shows the last known position of the player, if available.

[LazyJ]

kaeza, is xban2 capable of importing players.iplist.v2 ?

[kaeza]

Update:

• Fixed an ugly bug that could cause unwanted bans on servers. It is recommended to delete the database and start anew, or run this script in the standalone Lua interpreter (get it from your favorite package manager, or from here) to purge duplicate entries. Thanks to Zeno` for testing :)
• Added importer for old v2 database format. Thanks to LazyJ for helping with testing :)

[stormchaser3000]

ok um here is a bug: when i xtempban someone they get permanetly banned until i execute xunban. and yes i did use xtempban

[kaeza]

Update:

• Fixed temporary bans not working at all (the function responsible for removing expired bans was not being run).
• The `/xban_record` command now lists the ban "source". The "source" is the player or mod that performed the ban (the source was always stored in the database, but the report did not include it).

[Lejo]

Is it possible to see the ips of the players?
Can I ban player per mac-Address?

This mod is soooooo nice!

[kaeza]

The players' IP(s) are recorded in the database, but are not currently visible anywhere (except when banning).

Banning by MAC address is not possible as we don't have access to that info.

[Lichtbringer]

But if trollip/trollname is banned and he tries to login as trollip/myname, wouldn't that ban me too?
(because myname gets linked to trollip's account)

If someone lives in a living group or orphanage, banning one would ban all.
It is also a very certain ban on all shared ips like school-ips, internet-coffee-shops, …

[kaeza]

That's a known issue, and I don't feel it's worth it to resolve it. Will accept suitable patches of course.

[redblade7]

Is it safe to manually remove all (or all but one) IPs out of the xban.db file (from the "names" section with the usernames)?

[kaeza]

Yes it is. The database has no circular references or anything hidden, so simply removing a name or IP from an entry disassociates it from the "user".

[redblade7]

Yes it is. The database has no circular references or anything hidden, so simply removing a name or IP from an entry disassociates it from the "user".

Right after posting that message two weeks ago, I decided to try anyway, and the server (Creative Gardens) has worked fine with no problems. Thank you!

[redblade7]

Could you please add the ability to ban IP ranges? Currently the only way to do this is iptables which can cause massive server lag if the range is too large.

[scottwolff]

I banned a hacker for one year with this. My moderator asked why not forever, so I banned for 99 years.

[redblade7]

Could you please add the ability to ban IP ranges? Currently the only way to do this is iptables which can cause massive server lag if the range is too large.

Actually the "massive server lag" was another issue I dealt with some time ago, see other posts. Still it would be nice to have IP range bans.

Question: Is this compatible with IPv6? My ISP doesn't have IPv6 support, so I never enabled it on my servers as accessing it via IPv6 would only be possible through Microsoft's built-in gateway on my Win10 computer. IPv6 would be more effective at banning people, for those whose ISPs or mobile devices support it.

[Lone_Wolf]

Could you please add the ability to ban IP ranges? Currently the only way to do this is iptables which can cause massive server lag if the range is too large.

Actually the "massive server lag" was another issue I dealt with some time ago, see other posts. Still it would be nice to have IP range bans.

Question: Is this compatible with IPv6? My ISP doesn't have IPv6 support, so I never enabled it on my servers as accessing it via IPv6 would only be possible through Microsoft's built-in gateway on my Win10 computer. IPv6 would be more effective at banning people, for those whose ISPs or mobile devices support it.

I'm pretty sure this does support IPv6

[Ruslan1]

can you add /ban_list

[Lejo]

There is already /xban_gui

[Piezo_]

Hello! I'm not sure if this mod is still under active development, but something changed with how auth data can be accessed in minetest 5.x, and the mod no longer works properly. Issuing /xban_gui crashes the server.

Please update the mod!

[redblade7]

Hello! I'm not sure if this mod is still under active development, but something changed with how auth data can be accessed in minetest 5.x, and the mod no longer works properly. Issuing /xban_gui crashes the server.

Please update the mod!

The version released on February 12 is compatible with the new auth system:

https://github.com/minetest-mods/xban2/