Trackmania public server IPs?

[browner87]

Hi all, I recently added a few Internet block lists on my firewall. Unfortunately, at least some of Trackmania's servers are hosted on OVH France. As a cyber-security analyst, I can see why it falls under a blanked blacklist (OVH, especially in France, is notorious for being a web attack source).

Now, the 1 IP I have from my firewall logs is 91.121.54.102. I assume TM has more than 1 public IP. Now, I don't play online, but it would be nice if I could log in using my TM account and collect coppers etc. So, can anyone provide an IP range that I can whitelist on my firewall that only includes TM-owned IPs that would at least give me that level of functionality?

[TMarc]

Are you talking now about TrackMania original / United / Forever (because you told "coppers"), or about TrackMania² in ManiaPlanet (where it is only about collecting Planets)?

For ManiaPlanet related titles, please see here and here for server names, IPs you can find out by pinging them.

[TheBigG.]

Hi all, I recently added a few Internet block lists on my firewall. Unfortunately, at least some of Trackmania's servers are hosted on OVH France. As a cyber-security analyst

As a cyber-security analyst you should know that blocking IPs is useless.

[browner87]

Are you talking now about TrackMania original / United / Forever (because you told "coppers"), or about TrackMania² in ManiaPlanet (where it is only about collecting Planets)?

For ManiaPlanet related titles, please see here and here for server names, IPs you can find out by pinging them.

I'm using TM United Forever if that's a thing? I used to have TMU but then something said I needed an update and it turned into something with the word Forever in it I think. I'll dig those names and see if whitelisting them solves my issues. Thank you!

As a cyber-security analyst you should know that blocking IPs is useless.

Why on earth is blocking IPs useless? You think OVH is going to magically get a new /16 that it owns tomorrow? No, not likely. Will Apple sell 17.0.0.0/8 any time soon and get a new range for itself? No. Will 115.0.0.0/8 or 116.0.0.0/8 stop belonging to China/Korea any day soon (I'm sure there are a few overlapped ranges in there not belonging to them, but nothing I likely care about)? No.
I know that the average script kiddie can just change his IP by resetting his mom's modem, but when a company / country is a problem, they tend to own static net ranges. Yes, you could wait to detect an attack via snort/suricata/etc, but that's not always good enough. If I wait to see the ShellShock attack, it's already too late. But if I drop your very first syn packet because I know you have a chinese IP, I'm 100% safe from that attack.

[browner87]

The following worked perfectly for me (might be overkill, but oh well)

Code: Select all

init.maniaplanet.com.   178.33.248.109
mp01.maniaplanet.com.   178.33.248.151
mp02.maniaplanet.com.   178.33.248.149
mp03.maniaplanet.com.   178.33.248.239
mp04.maniaplanet.com.   178.33.248.16
mp05.maniaplanet.com.   5.135.65.155
mp06.maniaplanet.com.   5.135.65.156
mp07.maniaplanet.com.   46.105.188.92
mp08.maniaplanet.com.   46.105.188.93
ws.maniaplanet.com.     178.33.43.29
game.maniaplanet.com.   178.33.248.151
files.maniaplanet.com.  91.121.43.95
files2.maniaplanet.com. 178.33.248.17
files3.maniaplanet.com. 178.33.248.27

[TheBigG.]

but when a company / country is a problem, they tend to own static net ranges.

because a country or the biggest hoster in europe aren't a problem. You can whitelist 127.0.0.0/8 that is safe, but everything else is evil.
It's the internet, today you get somewhere instant vservers from which you can attack, you can't judge ips, they can change his owner in hours. But somehow there are a lot of people who don't know how the internet works, they created spamhaus.

[011000010110111001101111]

You think OVH is going to magically get a new /16 that it owns tomorrow? No, not likely. Will Apple sell 17.0.0.0/8 any time soon and get a new range for itself?

New IPv4 annouced 151.80.0.0/16

https://twitter.com/olesovhcom/status/5 ... 3055384582

Oops

[w1lla]

Code: Select all

game.mediaplanet.com.   31.25.64.171
files.mediaplanet.com.  31.25.64.171
files2.mediaplanet.com. 31.25.64.171
files3.mediaplanet.com. 31.25.64.171

Shouldnt it be maniaplanet.com and not mediaplanet.com

Whitelisting the wrong ip adresses... Good cyber-security analyzing then.

[browner87]

Code: Select all

game.mediaplanet.com.   31.25.64.171
files.mediaplanet.com.  31.25.64.171
files2.mediaplanet.com. 31.25.64.171
files3.mediaplanet.com. 31.25.64.171

Shouldnt it be maniaplanet.com and not mediaplanet.com

Whitelisting the wrong ip adresses... Good cyber-security analyzing then.

Thank you, I did goof on that. I've updated my post. I didn't claim the be the perfect son of God, so please don't crucify me for a typo.


Everyone else, IP blocking is a valid part of security. It is like the potatoes in your dinner; it is part of a well-balanced security setup. Anyone who would just deploy one type of security system (be it a firewall, rule-based IDS, policy based web proxy, etc) is going to have half-baked security no matter which they choose.

As this topic has been answered, I think the mod's can lock this now before a further flame war breaks out.

[TheBigG.]

Everyone else, IP blocking is a valid part of security.

it's part of security through obscurity.