server bans Internal IP on banning people

[goakiller900]

Hi there, not sure how to name the title since English is not my first language !

So here is the situation,
I have a CentOS 8 machine running on a Virtual machine, that's running factorio headless server. That has its own IP assigned trough NAT
now last week I had an annoying/very rude player online, so I decided to /ban him, only to see in the console that it bans the Internal NAT address?
And if anyone of the non banned people tried to rejoin, is considered them banned too? Since everybody according to the console is connected to the same internal IP.

I did a quick dirty search on the forums but could not find something 1,2,3 like that

Anybody knows what's going on here ?

[Klonan]

Anybody knows what's going on here ?

Don't worry about it, the bans are based on Name, not on IP address

[goakiller900]

Then why do we all get banned ?

[Klonan]

Then why do we all get banned ?

Ah, my bad, things must have changed a while ago, looks like we check both the IP and the Username, this could be a problem

[goakiller900]

I can test it again but due to timezone's differences nobody is on right now. will let you know
should i paste a console output for you ?


2021-07-29 07:06:22 [BAN] Timo-Herzebrock was banned by goakiller900. Reason: Teste keine Sorge.
1161.979 Info ServerMultiplayerManager.cpp Disconnect notification for peer (3)
1161.979 Info ServerSynchronizer.cpp:619: nextHeartbeatSequenceNumber(31474) removing peer(3).
1171.111 ConnectionRequestReplyConfirm (type(ConnectionRequestReplyConfirm) ) from(IP ADDR:({192.168.250.1:59126}))
1171.111 Refusing connection for address (IP ADDR:({192.168.250.1:59126})), username (Timo-Herzebrock). UserBanned
1178.373 Info ServerMultiplayerManager.cpp Disconnect notification for peer (2)
1178.373 Info ServerMultiplayerManager.cpp:930: updateTick(14225802) received stateChanged peerID(2) oldState(InGame) newState(DisconnectScheduled)
2021-07-29 07:06:39 [LEAVE] goakiller900 left the game
1178.373 Info ServerSynchronizer.cpp:619: nextHeartbeatSequenceNumber(31896) removing peer(2).
1179.372 Info ServerMultiplayerManager.cpp Auto saving map as /opt/factorio/saves/server.zip
1179.372 Info AppManager.cpp:420: Saving game as /opt/factorio/saves/server.zip
1181.586 Info AppManagerStates.cpp Saving finished
1186.417 ConnectionRequestReplyConfirm (type(ConnectionRequestReplyConfirm) ) from(IP ADDR:({192.168.250.1:63151}))
1186.417 Refusing connection for address (IP ADDR:({192.168.250.1:63151})), username (goakiller900). UserBanned

[goakiller900]

Then why do we all get banned ?

Ah, my bad, things must have changed a while ago, looks like we check both the IP and the Username, this could be a problem

so ? this is a problem ?

[SoShootMe]

Anybody knows what's going on here ?

So, all clients appear to the server to be connecting from the same IP address?

How much of the network routes from the clients and the server can you describe? I know that's not a very specific question, but understanding a bit more of that (especially any parts that are common to all) is the only way I can see to answer your question. Knowing which parts of the network are under your control may show whether there's anything you can do about it.

Running tracert/traceroute on the client(s) to the IP address they connect to, and on the server to the apparent IP address the clients come from, might be revealing.

The only "normal" reason for two clients to have the same apparent source address (from the server's perspective) that I can think of would be if they are both on the "inside" of a NAT router with the same "outside" IP address.

[KeepGridButton]

Could be alot of things. Depending on where your VM is hosted, it might be behind some sort of gateway, and the last hop before reaching the server shows the IP address for the gateway backend.

The VM might have a virtual network interface that performs it's own NAT'ing.

If your VM is hosted outside your network, like some third party host, and you and your friends are all on the same network such as being in a dorm, then you're connection are going to all show the same public WAN IP address from the perspective of the server.

Honestly really hard to say without doing some diagnostics, and even then it can be hard to figure out.