Sessions & Security
Sessions
The J3di network limits each IP address to 5 concurrent connections (or "sessions").
This is quite a high limit; most networks limit clients to 2 or 3 connections per IP.
If the limit is abused, the limit for that IP (or ISP) will be reduced automatically.
Security
There are several measures in place to ensure the security of both the servers and connected users.
- We scan all connecting clients for "Open" Proxies using BOPM. If one is detected, the client is forcefully disconnected and their IP address is banned.
- 99% of "Open" Proxies are used by spam bots, virus bots or other malicious scripts.
- "Closed" proxies are permitted (such as transparent ISP proxies), as they only allow authenticated users to use them.
- Public "Tor" exit nodes are also not permitted.
- On connection, all users' hostnames (or IP addresses) are "cloaked".
- For example, 12-34-56-78.some.isp.com becomes j3di-a7b8c9d0.some.isp.com.
- All passwords are encrypted using a non-reversible encryption standard (SHA1)
- SSL is supported by each server. The servers also use a common "wildcard" certificate, signed by CACert, which will not change (until it expires).
- All servers are linked to each other using encrypted connections.