Blocking MAC id's

  • Poly
  • Guru
  • Guru
  • User avatar
  • Joined: Jul 31, 2004
  • Posts: 1054
  • Loc: Same place you left me.
  • Status: Offline

Post August 14th, 2012, 10:43 am

Is it possible to detect and block MAC id's on a website. For example, my current method of banning a person is disabling their user ID, and blocking their IP from accessing our site. Both are easy enough to get around(change your IP and register a new user). I'm looking for a better option. Anybody have an ideas on this?

My understanding is the MAC id should not be available to me unless I'm on the same ethernet segment as the device I wish to block. Is this correct? If so that would make it impossible to collect using PHP or any other web language correct?
Every job is a self-portrait of the person who did it: Autograph your work with excellence.
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post August 14th, 2012, 10:43 am

  • Bigwebmaster
  • Site Admin
  • Site Admin
  • User avatar
  • Joined: Dec 20, 2002
  • Posts: 8922
  • Loc: Seattle, WA & Phoenix, AZ
  • Status: Offline

Post August 14th, 2012, 11:19 am

Yeah I think you are right Poly. I believe you would only be able to do that if you are on the same LAN as the user. MAC addresses are not included in the TCP/IP packets routed off the user's local network because that is a layer that is below it. I believe the layers are something like:

Application Layer (HTTP, FTP, SFTP, SSH, etc)
Transport Layer (TCP)
Internet Layer (IP)
Link Layer (usually Ethernet)

As far as a better option, you might block a range of IP addresses if they seem related. If not, you might be able to detect if they are using the same computer by setting cookies, although that could be easily broken through by just deleting the cookie.

The user(s) you are trying to ban, do they typically conduct the same behavior? It could be possible to detect that behavior with a script and auto ban that way.
Ozzu Hosting - Want your website on a fast server like Ozzu?
  • Poly
  • Guru
  • Guru
  • User avatar
  • Joined: Jul 31, 2004
  • Posts: 1054
  • Loc: Same place you left me.
  • Status: Offline

Post August 14th, 2012, 11:35 am

I've done some research and apparently using ActiveX and Javascript you can do client/server communication that will tell you the users MAC, but its only compatible with IE, and the user has an option of declining it. So I am inclined to agree that its not possible.

Unfortunately its a wide array of reasons. I might still look at setting up a script to auto ban for the most common stuff.
Every job is a self-portrait of the person who did it: Autograph your work with excellence.

Post Information

  • Total Posts in this topic: 3 posts
  • Users browsing this forum: No registered users and 4 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.