Version 1.1.40

[FactorioBot]

Features

• Added auth server bans feature for multiplayer games. When enabled this will inform the Factorio.com authentication server of ban and unban commands issued in multiplayer sessions. Designed to combat griefers in multiplayer games, it will also query the authentication server for a ban recommendation when a user tries to connect.

Bugfixes

• Fixed that trigger prototype flag filters didn't work correctly when an entity had no flags set. (99773)
• Fixed a crash after inserting fuel into burner inserter while it was already trying to fuel itself. (99858)
• Fixed that unrelated entities were highlighted when using a cut tool. (99720)
• Fixed that in editor mode undoing deconstructions did not instantly revive affected entities. (99622)
• Fixed that setting the direction of a script created character entity didn't work correctly. (99887)
• Fixed that items with fuel value would be put into furnace fuel inventory when there was enough fuel but item could be smelted. (99924)
• Fixed inserters picking up items on ground marked for deconstruction. (99770)
• Fixed that the low power tip didn't show in some circumstances.
• Tweaked some of the triggers to show/skip tutorials related to drag building.
• Fixed that Furnace's working_visualisations would not apply recipe tint on fadeout. (99997)
• Fixed crash due to usage of standard library function that is missing on macOS 10.11. (100012)

Use the automatic updater if you can (check experimental updates in other settings) or download full installation at http://www.factorio.com/download/experimental.

[Klonan]

This release has the new Factorio auth server bans feature,
If anybody has any questions, please feel free to ask, I will expand this post with questions and answers

----------------------

Is "ban recommendation" automatic ban or it just prompts admins whether to ban or let the player connect?

If the feature is enabled on the server, the server will automatically ban any user our server recommends for a ban when they try to join.

----------------------

Are you able to say what would qualify a "ban recommendation"?

For now we are not going to go into too much depth, but it will be based on a number of criteria, such as number of bans, date/age of bans, how long the player was online, etc.
We will also be able to update and tweak the exact criteria on our Auth server, so it is quite flexible and we can react quickly (as opposed to needing a whole new Factorio version to tweak some internal numbers).

----------------------

Will there be an option to opt-in but not auto-ban, and instead notify admins?
What about to only allow the player to connect if an admin is present to be notified?

At present, no, we want to keep things as simple as possible. We will be keeping our ears open, so if there is need for more configuration or options down the line, it is a possibility.

----------------------

If a player is auto-banned and an admin then unbans that player, but auth bans are still enabled, is the auth ban overrode and does this info get sent to the auth server?

Yes, the auth server will see the unban and account for it.

----------------------

If players are auto-banned and auth bans are later disabled, do those bans persist?
What about if the auth ban is later reversed?

No, if Auth bans are turned off, the bans will not persist, they are a separated check from the game bans list.
If the Auth ban is reverse, the player will be able to join, the result of the auth check is not persisted in the game.

----------------------

Is there or will there be some appeal system for those on the ban recommendation list?

Yes, email support@factorio.com and we will take a look into it

----------------------

Does this only account for ban/unban as the explanation suggests, or does it in fact also account for "kick"?

Kick doesn't count, we see kick as more of a warning anyway.

----------------------

What information about the player is stored on the ban-server?
I guess: - player(id) - date - ban/unban-commands - server
That’s it, or? Any recommendation is then not stored, but always based on that entries?

Other question: what if the server is not accessible? I guess: everybody can come into a server.

Which leads me to the next question: because of that, this new service could be the target of griefer-attacks. How do you protect it from being attacked (I think most common would be DoS)? Is it big enough to handle the requests? Can you automatically filter out attacking IP’s? Is it separated enough from the other (Auth) systems?

That list is correct plus some secret attributes We'll introduce new attributes if we find them to be a more precise signal for a good ban recommendation.
Ban recommendation is recalculated when a new ban/unban signal is received.

The ban recommendation check is async, so if the auth server is not reachable, the connecting user is not disconnected. It will also not block the main thread when the auth server is slow to respond.

Our existing auth server setup should scale well and I think we'll able to protect it. Of course given enough monetary ressources you can DoS any service...

----------------------

Is it made clear to the user that they were banned by a decision of Wube's system and not merely by the individual servers, or how would one know to appeal?

This is the message a user sees:
"You are banned in this game by authserver recommendation. To appeal contact support@factorio.com."

----------------------

What are the steps to enable the "Auth server bans feature" ?

The commandline flag is --use-authserver-bans and the config option is enable-authserver-side-bans=true

----------------------

[JohnTheCF]

Is "ban recommendation" automatic ban or it just prompts admins whether to ban or let the player connect?

[Oxyd]

Is "ban recommendation" automatic ban or it just prompts admins whether to ban or let the player connect?

If the feature is enabled on the server, the server will automatically ban any user our server recommends for a ban when they try to join.

[Cooldude2606]

Are you able to say what would qualify a "ban recommendation"?

[Klonan]

Are you able to say what would qualify a "ban recommendation"?

For now we are not going to go into too much depth, but it will be based on a number of criteria, such as number of bans, date/age of bans, how long the player was online, etc.
We will also be able to update and tweak the exact criteria on our Auth server, so it is quite flexible and we can react quickly (as opposed to needing a whole new Factorio version to tweak some internal numbers).

[morsk]

I don't want to know how this works; I hope no one ever learns how it works.

Large communities don't need this; they have teams of moderators, ban lists, and Discord integration. It's random people who just want to turn their map public, spontaneously, who need Wube to be offering them a ban list.

[Klonan]

It's random people who just want to turn their map public, spontaneously, who need Wube to be offering them a ban list.

Yes, thats exactly how we see it.

[Loewchen]

Is there or will there be some appeal system for those on the ban recommendation list?

[Hornwitser]

What inspired the implementation of the auth server ban system?

[Hexicube]

Glad to see this finally added, but I have some questions about it:

Will there be an option to opt-in but not auto-ban, and instead notify admins?
What about to only allow the player to connect if an admin is present to be notified?

If a player is auto-banned and an admin then unbans that player, but auth bans are still enabled, is the auth ban overrode and does this info get sent to the auth server?

If players are auto-banned and auth bans are later disabled, do those bans persist?
What about if the auth ban is later reversed?

[jodokus31]

Anybody having this problem?

Screenshot_2021-09-22_18-05-55.png (15.06 KiB) Viewed 14899 times

EDIT: I downloaded the full version from website. That worked without problems

[Brathahn]

Is there or will there be some appeal system for those on the ban recommendation list?

Also what happens to people like me, who likes to join random (public) servers with people on it, that just outright kick/ban you the moment you join just because they are too dumb to make it private/set a password?
As i understand it, this system will be automatic and just counts your bans/kicks and puts you on the naughty list.

[Klonan]

Will there be an option to opt-in but not auto-ban, and instead notify admins?
What about to only allow the player to connect if an admin is present to be notified?

At present, no, we want to keep things as simple as possible. We will be keeping our ears open, so if there is need for more configuration or options down the line, it is a possibility.

If a player is auto-banned and an admin then unbans that player, but auth bans are still enabled, is the auth ban overrode and does this info get sent to the auth server?

Yes, the auth server will see the unban and account for it.

If players are auto-banned and auth bans are later disabled, do those bans persist?
What about if the auth ban is later reversed?

No, if Auth bans are turned off, the bans will not persist, they are a separated check from the game bans list.
If the Auth ban is reverse, the player will be able to join, the result of the auth check is not persisted in the game.

[Klonan]

Is there or will there be some appeal system for those on the ban recommendation list?

Yes, email support@factorio.com and we will take a look into it

[Klonan]

What inspired the implementation of the auth server ban system?

Maybe we will talk about it in some future friday facts

(It is not important for now)

[valneq]

Does this only account for ban/unban as the explanation suggests, or does it in fact also account for "kick"?

[NotRexButCaesar]

Could the server account for the ban reason, the ratio of banned to unbanned players, or employ some other set of criteria to weight bans? Some multiplayer games (especially on modded games where few people ever try to join) will ban every joining player instead of using a password.

[Klonan]

Does this only account for ban/unban as the explanation suggests, or does it in fact also account for "kick"?

Kick doesn't count, we see kick as more of a warning anyway.

[Loewchen]

Is there a way for players to find out if they are on the list, e.g. a URL to the auth server that shows the account status?
Is there a different error message when a connection is refused based on the auth server ban list vs the local ban list?