IP logging 101
Editor�s note: many members have asked if drugs-forum.com logs Internet Protocol (IP) numbers. IP numbers are unique and pose a security threat, as each IP can be traced back to an individuals computer or service provider server. In addition, server logs can be used to track and identify individuals and may be archived.
OG does not log IP numbers; this faq explains the IP logging process and some technical reasons why logging is not done.
1) Apache access logs log file for all http access to this site is deleted every 10 minutes using awstats. If allowed to run on it, would create a file that would be gigabytes in size in no time at all.
This type of logging would grind this server to a halt if it is not shut off, set to delete in minutes or logged on an independent server.
Do a google on http logs on busy servers and see what anyone will say about the overhead this logging produces trying to open one massive file every second to write to it.
2) vBulletin IP switch allows one to record IP address of every user on this when they register or post. This is shut off from the admin control panel, and also coded to prevent its use.
3) MySQL sessions table which keeps IP info, time and other info for the user when they visit this site. A heap table is used, which just keeps this data in memory rather than as a file on the hard drive.
This information clears after about 15 minutes from the time the user leaves the site or the users connection is inactive, it will also clear when the server is rebooted since it is stored in memory.
So how can we ban?
Using an IP ban is pretty useless if someone is using a dial-up since the IP is dynamic and will change the minute they redial or renew their connection. If they have a static IP, then all they would need to do is use a proxy server to get around such a ban.
So IP banning is not used for vBulletin, instead, the username is just banned. However, chat is automated and can ban users using their IP. This can only be done while the user is connected as it does not log an IP/Username and only used to prevent flooding.
- This article is part 13 of 18 in the series GrowFaq: Security.
Does OG log IP #'s?
Series TOC
- Series: GrowFaq: Security
- Part 1: What should I know about my online pictures, posts, and safety?
- Part 2: How can I safely mail smelly items?
- Part 3: How can I minimize my heat signature?
- Part 4: How can I mail ROOTED clones properly?
- Part 5: How do I safely purchase Cannabis growing equipment?
- Part 6: What are the basics of keeping a low profile?
- Part 7: The TRUE Golden Rule of Everything
- Part 8: What my power company had to say about my power usage (UK)
- Part 9: Is Overgrow safe?
- Part 10: What security tactics are good for outdoor plots?
- Part 11: What type of lock should I buy?
- Part 12: How can I post with more personal safety?
- Part 13: Does OG log IP #'s?
- Part 14: ACLU Bust Card
- Part 15: When is it lawful for LEO to search me, my house or my car?
- Part 16: What are the Federal Sentencing Guidelines?
- Part 17: Should I ever consent to a search of my house or car?
- Part 18: Probable Cause and Search Warrants (US)
- This article is part 13 of 18 in the series GrowFaq: Security.
Comments
Sort Comments By