Feature request: IP or email mute and ban system

in my experience, i banned @lemontreesong0101(actually it's sub account of @colourgrey), but he comes through with so many sub account and threatens my club. For now, i'm sick and tired of investigating all new members. Can you make IP or email ban or mute that punishment through maintain?

The exact same email can't be be used for alternate accounts and someone that knows what they're doing can easily bypass IP bans

hi

Ip bans are easily bypassable, In windows 10/11 go to settings,>network/internet settings>change adapter settings>(wifi/ethernet, depends on what your using)>properties>Ipv4 DCHP adapter and in that menu you can change your IP address, default gateway and subnet mask.

than what are the good way to do?

there is no technical way to do what you request, in a way that cannot easily be bypassed.

use ipv6 instead of v4, v6 isn't changed when using a vpn(most vpns at least), if anyone using v6 tries to make another account banned through v6 i think it's obvious what will happen

and if chess.com doesn support v6 then this is actually impossible

cant change your modems one tho, that's just your connector, and to change your ip on your modem you have to void your end license user agreement with the company you use and void any warranty you have on the modem.

and again, ipv6 cannot be changed (under most cases, it does auto update sometimes but that depends on the parameters of v6's connection which likely wont change enough not to justify this feature)

I think it should be impossible to do anything for the player until they enter a code sent to their E-mail (You can actually play before you activate your account!) so they can't enter a fake E-mail.

That only changes the local device. That does nothing once the traffic passes through your local router.

I'm not an IPV6 expert at all, but it likely depends on a number of factors. IPs can still be proxied as far as I'm aware, so it will always be possible to hide your actual address from your destination.

possible yes, but very unlikely, almost no vpn supports ipv6 connection, do you have anyone on the team that has worked with vpns/ipv6 before? also with the way ipv6 works it would be difficult to mask your adress through a vpn anyways (it stores your ip to cloud servers then sends it thats why i said previously that updating your ip is basically the only way to change ipv6 and the only way to do that is to move houses and devices)

maybe someone on the tech team knows more about this than both of us and could help with this feature? i just recently got involved in ipv6 (about a month or two ago) and don't understand it all that well myself.

Almost no site is going to force IPv6 connections until the amount of IPv4 clients drop extremely low.

There's also nothing special about a VPN that they can't support IPv6 and some already do. Being a VPN, they're going to still hide any information that will give away the original source. IPv6 proxies also exist.

Places like businesses and schools will also continue to proxy IPv6 connections and most are going to hide all their outgoing connections behind a limited number of IPs.

So, IPv6 does not solve issues of IP blocks or block circumvention.

there's only 4 vpns that secure ipv6 connections, 21% of the web supports ipv6 (including cloudflare which i know is what chess.com uses, and cloudflare has it as a basic part of its plan) and most proxies will always have the same ip address so just ban the proxy and you ban anyone trying to use it.

on the other hand i could argue that the ip ban system would help in a small way by removing the threat of certain people making a new account, people who don't know about proxies, vpns, virtual nets (virtual machines) or cloud computing along with other bypasses of ip banning services,

proxies always show one IP address to the server no matter who is using them. so that issue is solved instantly (unless the user owns the proxy and is resetting it every time they get banned, which even then it will use the same server most of the time)

vpns can be blocked by bounce tracing with ipv4 or just using ipv6 as there are only 4 vpns in the world that allow an ipv6 connection, others will just block it outright.

oh and chess.com uses cookies which vpns cant change so there's another possible solution (clearing cookies solves this for the user obviously)
then there's fingerprinting a person's computer

If you cant Ip ban (which you can i know of several methods that tracks ipv4 through vpns and proxies that a few games use) them you can at least put a system up against people making alt accounts that is actually somewhat effective?

oh and then there's fingerprinting someones browser, almost everyone has a unique fingerprint.

That's never going to happen.

As to IPv6 VPNs, as more and more traffic moves to IPv6,more VPNs will support it.

There are browsers that actively hide fingerprints and it's relatively trivial to bypass that as well. The site does use both methods, IP bans and fingerprint bans, and it only stops some abuses.