How to Block ?!

[fireTQ]

Hey ,
fewdays ago i found a post in somewhere else says :

Block Some ip Adresses that's for Co ,
So i wondred maybe that could help to Avoid Botjail .

So what im asking here how to Bock Ip adress from my Computer .

Thanks .

[Dragons_Tooth]

if you have a firewall it might support adding rules to block ip addresses .

lookup the tutorials/help for your firewall on how to do this if you dont know already.

[fireTQ]

i try ...

[sharinggan]

Originally Posted by fireTQ

Hey ,
fewdays ago i found a post in somewhere else says :

Block Some ip Adresses that's for Co ,
So i wondred maybe that could help to Avoid Botjail .

So what im asking here how to Bock Ip adress from my Computer .

Thanks .

im not too sure if this is the right address. i blocked it in comodo and i still get jailed tho. 121.207.250.58
<edit>
WHOIS - 121.207.250.58


Location: China [City: Fuzhou, Fujian]

ARIN says that this IP belongs to APNIC; I'm looking it up there.


% [whois.apnic.net node-1]
% Whois data copyright terms

inetnum: 121.204.0.0 - 121.207.255.255
netname: CHINANET-FJ
descr: CHINANET Fujian province network
descr: China Telecom
descr: 7,East Street ,Fuzhou ,Fujian ,PRC
country: CN
admin-c: FH71-AP
tech-c: FH71-AP
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CHINANET-FJ
mnt-routes: MAINT-CHINANET-FJ
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: **********@apnic.net 20060831
source: APNIC

person: FUJIANNET HOSTMASTER
nic-hdl: FH71-AP
e-mail: *****@fjdcb.fz.fj.cn
address: 7,East Street ,Fuzhou ,Fujian ,PRC
phone: +86-591-83309761
fax-no: +86-591-83371954
country: CN
changed: *****@fjdcb.fz.fj.cn 20100105
mnt-by: MAINT-CHINANET-FJ
source: APNIC
anyone could verify if thats the ip add we need to block?

[shitboi]

this is my personal feedback, might not be accurate.

There are a couple IPs that your client reports to. i think there are 3 of them that are from 121.xx.xx.xx, another 3 reports to 141.xx.xx.xx, and 1 more to 208.xx.xx.140 (looks like log in server but is not)

If you are running a proxy, you naturally have to delete your gamechecks, and ipsec folders, and of course blocked the above mentioned IPs. But even so, TQ seems to be able to detect anomaly if your client did not report to those IP's for a long time and dc's you.

I tried to impose a rule only after log in. That is aside from the destination IP/port, no connections are permitted. This is the setting that still led to disconnection, and hence my deductions above.

Basically you need to get innovation and trick TQ into believing you are not cheating. Not reporting to them is not an option.

Of course, if you dont mind DC every 30min or so, you are fine block all IPs but the game server IP.

[sharinggan]

Originally Posted by shitboi

this is my personal feedback, might not be accurate.

There are a couple IPs that your client reports to. i think there are 3 of them that are from 121.xx.xx.xx, another 3 reports to 141.xx.xx.xx, and 1 more to 208.xx.xx.140 (looks like log in server but is not)

If you are running a proxy, you naturally have to delete your gamechecks, and ipsec folders, and of course blocked the above mentioned IPs. But even so, TQ seems to be able to detect anomaly if your client did not report to those IP's for a long time and dc's you.

I tried to impose a rule only after log in. That is aside from the destination IP/port, no connections are permitted. This is the setting that still led to disconnection, and hence my deductions above.

Basically you need to get innovation and trick TQ into believing you are not cheating. Not reporting to them is not an option.

Of course, if you dont mind DC every 30min or so, you are fine block all IPs but the game server IP.

cant think of anything else but to get CO run in backtrack.
<edit>
that leaves me wondering, what specifically is being reported to each address?

[shitboi]

Originally Posted by sharinggan

cant think of anything else but to get CO run in backtrack.
<edit>
that leaves me wondering, what specifically is being reported to each address?

actually ... i do not think those reports are encrypted. I am even thinking if those reports can be modified to trick the report collection servers into thinking this client is clean. Try logging using WPE0.9. the packets sending to these report servers are directly readable. I can't recall what they are saying, or what format they are in. But i remember they are definitely in ascii

Edit: When i say getting innovative... it really means innovative. There are EASY solutions without changing a platform.

[sharinggan]

Originally Posted by shitboi

actually ... i do not think those reports are encrypted. I am even thinking if those reports can be modified to trick the report collection servers into thinking this client is clean. Try logging using WPE0.9. the packets sending to these report servers are directly readable. I can't recall what they are saying, or what format they are in. But i remember they are definitely in ascii

Edit: When i say getting innovative... it really means innovative. There are EASY solutions without changing a platform.

aight thanks bud. imma dig some more on those ip adds

[Lateralus]

An anti-anti-bot client.

[topsites]

Simply unplug any network adapters, modems and cables, that way nobody can trace you.

[~*NewDuuDe*~]

Sadly that would also eliminate his chances of cheating.

Off topic: Lateralus! Haven't seen you in like a year. How's it going?

[Amaranth Aeon]

What ever u have Done ...there's No escape From the Botjal !!!