Security Concerns

[thalador]

I posted this at vb.com but was referred here.

I am currently using a nuke-evolution based system and moving it over to vb. The nuke-evo comes with a mod called Sentinal for IP security, banning, user/ip info etc.. Does VB have something similar built in, or do I need a mod? I see the part in the admin for user banning options, but things that I am missing are these:

1. The ability to disallow proxy servers

2. The ability to lookup an IP address based on people currently on the site - for example if I have guests on my system can I see all the IP addresses and ban from there?

Hope thats it. Thanks!

[Lynne]

1. I believe there is a mod for that. Search "proxy" "All Mods" "Titles Only" and you will get a list of different types of mods regarding proxies. One of those should hopefully be what you are looking for.

2. You, as the admin, can enable seeing users IPs in the Who's Online list. From there, you can grab the IP and then add it to the Banned IP list in the Admin CP > Banning area. Personally, I prefer to add 'bad' IPs to my htaccess file.

[thalador]

Thanks Lynne,

As for #2, I did enable this feature. I was wondering if maybe there is a mod to ban from that "Who's Online" screen?

BTW, thanks for the quick reply :D

[Lynne]

There is currently no mod to ip ban someone from the Who's Online screen (that I have seen). You are not the only one I have seen ask for this though.

[Jase2]

There is currently no mod to ip ban someone from the Who's Online screen (that I have seen). You are not the only one I have seen ask for this though.

Hmm... that may keep me busy :)

[thalador]

Hmm... that may keep me busy :)

I found with my other board that potential hackers and/or trouble makers will get a new ip and troll the board as a guest, that way no cookie.. Being able to ban a guest would be a great addition.

[Jase2]

You can ban a guest, by banning their IP address. Although, if they're coming back to your site, they are probably using a proxy. You could try using the miserable users hack... never tried it, though.

[King Kovifor]

I found with my other board that potential hackers and/or trouble makers will get a new ip and troll the board as a guest, that way no cookie.. Being able to ban a guest would be a great addition.

Guest Banning = IP Banning, the only way to do it. :(