Log in

View Full Version : Board Optimization - Proxy Alert


Pages : 1 [2]

ForceHSS
07-26-2014, 03:16 PM
And how can I test to see if that is not working on my site and with or without the brackets {vb:raw toralert}

Marv
07-31-2014, 06:45 AM
InsaneManiac,

ProxyAlert is now running for about a week and we had to found out, that we run into some difficulties that are annoying our members, especially those using mobile carriers via phone, tablets or pods.

1. We have in that particular forum a large number of false positives, we had to check manual. Though, by the design of this mod we weren´t able to grant those false identified access to the forums.

2. Most - if not all - mobile providers are using proxies for their customers. ProxyAlert is blocking nearly 80% of all Tapatalk users. Even myself.

Any ideas?

RichieBoy67
07-31-2014, 09:00 AM
InsaneManiac,

ProxyAlert is now running for about a week and we had to found out, that we run into some difficulties that are annoying our members, especially those using mobile carriers via phone, tablets or pods.

1. We have in that particular forum a large number of false positives, we had to check manual. Though, by the design of this mod we weren?t able to grant those false identified access to the forums.

2. Most - if not all - mobile providers are using proxies for their customers. ProxyAlert is blocking nearly 80% of all Tapatalk users. Even myself.

Any ideas?

I would just use the Tor blocker.

Marv
07-31-2014, 09:30 AM
Thanks for the head up, Richie. That´s exactly what we´ve changed meanwhile, too. But we need the webproxy filter to work, to get rid off our "I am a motherf***in special forces"... trolls.

RichieBoy67
07-31-2014, 09:58 AM
Thanks for the head up, Richie. That?s exactly what we?ve changed meanwhile, too. But we need the webproxy filter to work, to get rid off our "I am a motherf***in special forces"... trolls.

I hear you but some countries use proxies almost as a default and some isp's will also be flagged that way as will some phone carriers.

In addition many thousands if not more of new proxies are created every day. It is impossible to keep up with them.

Trolls are a pita though!

Marv
07-31-2014, 10:17 AM
Anyone an idea hot to make this mod smarter? When I?m using tor I?m not detected.

function IsTorExitPoint()
{
if (gethostbyname(ReverseIPOctets($_SERVER['REMOTE_ADDR']).".".$_SERVER['SERVER_PORT'].".".ReverseIPOctets($_SERVER['SERVER_ADDR']).".ip-port.exitlist.torproject.org")=="127.0.0.2")

leemart44
08-01-2014, 07:26 PM
I'm using the pro version at it blocks all my tor attempts
the free version doesn't block tor browser

Marv
08-01-2014, 07:32 PM
I have the pro version and even with a "this.is.a.tor.exit.node.org" -IP I?m not getting caught with my tor. Shall I do a testing with your site ;)?

ReactionShot
10-06-2014, 12:18 PM
It works great for me. Instantly purchased pro. Thanks Maniac!

TheInsaneManiac
11-11-2014, 10:45 PM
It works great for me. Instantly purchased pro. Thanks Maniac!

You're welcome, thank you for your feed back. I actually have been using courseware in PHP to freshen my skills more since I been doing freelancing, and I believe I am going to do another overhaul in the next couple of months. Detection for tor has improved, and I feel like reducing conditionals into case arguments to lessen code. I currently work 2 jobs and am freelancing so I work about 70 hours a week now, (trying to save up for a car since I drive a bike to work) so I do plan on working on it in my free time. I currently run a newer version which does integrate into the database, but it's relatively simple with only storing users detected. I will begin to code an AdminCP panel to load those users instead of having to view them in phpmyadmin.

I am looking for a beta tester of the new code, if interested PM me.

sonic83
01-10-2015, 12:03 PM
hello. Excelent plugin. What's the name of the cookie of "Proxy Alert"?
It's for the cookie's advertisement.
Thank you

Nelson58
01-10-2015, 12:29 PM
Very nice login!! Thank you for producing it!

I do want to update you, that it is recognizing routers as proxies. Here is a message from one of my members:

"I just got a pop up in the corner of my screen saying this and to disable it or change browsers. As far as I know I'm on my usual server and I haven't done anything to change it. I'm currently using an iPhone 4 with safari any ideas why this is happening? It's using my houses router currently. I just used my kindle and it didn't have the window pop up. Any ideas why this would be happening? How would I fix it?"

Nelson58
01-10-2015, 02:35 PM
It identified these IPs as Tors, and they aren't:

xxxx was detected using a tor!
Real IP: 66.236.27.197
Real Hostname: 66.236.27.197
Proxy IP: 66.236.27.197
Proxy Hostname: 66.236.27.197

was detected using a tor!
Real IP: 107.77.75.80
Real Hostname: 107.77.75.80
Proxy IP: 107.77.75.80
Proxy Hostname: 107.77.75.80

was detected using a tor!
Real IP: 10.154.0.250, 180.94.79.58
Real Hostname: Unknown
Proxy IP: 180.94.79.58
Proxy Hostname: 180.94.79.58

sonic83
01-10-2015, 06:19 PM
Hello. I purchased the PRO version now, but has no "product-proxyalert.xml" to run.

Appreciate your help. I am sending you pm

sonic83
01-10-2015, 08:55 PM
Hello. I purchased the PRO version now, but has no "product-proxyalert.xml" to run.

Appreciate your help. I am sending you pm

Thanks, I found the xml :)

But I urgently need this option:
Not Allowing users to post Tor
I thought that was already available.
When you think have it?

Thank You

Nelson58
01-11-2015, 05:15 AM
It identified these IPs as Tors, and they aren't:

xxxx was detected using a tor!
Real IP: 66.236.27.197
Real Hostname: 66.236.27.197
Proxy IP: 66.236.27.197
Proxy Hostname: 66.236.27.197

was detected using a tor!
Real IP: 107.77.75.80
Real Hostname: 107.77.75.80
Proxy IP: 107.77.75.80
Proxy Hostname: 107.77.75.80


was detected using a tor!
Real IP: 10.154.0.250, 180.94.79.58
Real Hostname: Unknown
Proxy IP: 180.94.79.58
Proxy Hostname: 180.94.79.58

Any fix for this incorrect Tor detection?

ozzy47
01-11-2015, 10:46 AM
Any fix for this incorrect Tor detection?

The pro version seems to have a IP whitelist option available.

Nelson58
01-11-2015, 10:50 AM
The pro version seems to have a IP whitelist option available.

I would rather it worked correctly than have to whitelist hundreds of users after looking each one up. That takes a lot of time.

I meant has he fixed it from all the false positives.

ozzy47
01-11-2015, 11:11 AM
It don't appear that way, if you are getting false positives. The developer has not been on here in two months, so who knows when he can address the situation.

Nelson58
01-11-2015, 11:28 AM
It don't appear that way, if you are getting false positives. The developer has not been on here in two months, so who knows when he can address the situation.

It's too bad, this is a great idea....

I hope this isn't another coder who just "leaves" and gives up on his mod....

TheInsaneManiac
01-13-2015, 06:37 PM
It identified these IPs as Tors, and they aren't:

xxxx was detected using a tor!
Real IP: 66.236.27.197
Real Hostname: 66.236.27.197
Proxy IP: 66.236.27.197
Proxy Hostname: 66.236.27.197

was detected using a tor!
Real IP: 107.77.75.80
Real Hostname: 107.77.75.80
Proxy IP: 107.77.75.80
Proxy Hostname: 107.77.75.80


was detected using a tor!
Real IP: 10.154.0.250, 180.94.79.58
Real Hostname: Unknown
Proxy IP: 180.94.79.58
Proxy Hostname: 180.94.79.58

The problem is that Tor detection is built off of Tor's exitlist. Which is their own IP address blocking script. Somehow their script is throwing false positives, and I am not understanding why, so this requires me to build the script to block the ip's individually. The problem with this is that I would have to update the ip definitions weekly or possibly daily. Which I don't mind doing, but I am unsure on vBulletins policy with automatic file updates. This may have to be something I do in the premium version. However I am ok with updating the definitions on my website server, but that means extra work for everyone else on uploading a new file every week to their servers. I even did a check for one of the IPs and found no results:
https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=107.77.75.80

So yes it can be done, but I need to check with vBulletin staff to see if I could do automatic file updates from my server.



It's too bad, this is a great idea....

I hope this isn't another coder who just "leaves" and gives up on his mod....

No I am not, I am just balancing two jobs and working for a third party on another project, and have not any time to work on anything the last couple months, and probably will still not have time for another 2-3 months when this project is completed.



Thanks, I found the xml :)

But I urgently need this option:
Not Allowing users to post Tor
I thought that was already available.
When you think have it?

Thank You

This is something that will be added to the next version.


EDIT: Approval from staff was given, when I have some spare time, I will upgrade detection.


Update: I have pushed out 1.9.3 to everyone. There was an issue that referred all proxies as tor detections. Now you can appropriately track an incorrect detection. If you are still receiving false positives from Tor side, then please let me know and I will code everything based on IP instead of Tor's API for blocking.

ForceHSS
01-30-2015, 11:14 PM
Have the pro version still waiting for email for the new version

TheInsaneManiac
02-01-2015, 10:43 PM
Have the pro version still waiting for email for the new version

I sent the email out, PM me your email affiliated with the Pro purchase.

Marv
02-02-2015, 07:00 AM
Don´t wanna jump a train but if this eMail has gone out to us Pro-customers, I have no mail, too. Doesn´t matter, cause since the mod isn´t really usable without a false detection quote of 30% I don´t use it anymore.

Whitelisting is nice - but heck, I can´t go through 8.000 dynamic IP´s each day and add them one by one to the list. Esp. nearly every mobile carrier uses proxies, where the half is beeing detected false as TOR-users. As I had the mod activated my mailbox turned into pandoras box with complaints over complaints.

Unless there is no data-service which handles & checks (!) the ip´s and ip-ranges for proxies, I wouldn´t recommend to use this on boards with >500 members.

ForceHSS
02-02-2015, 09:27 AM
I sent the email out, PM me your email affiliated with the Pro purchase.

Still no email

megabink
02-02-2015, 10:52 AM
The same here....

ForceHSS
02-02-2015, 11:20 AM
As a pro member we should of got the updated version first wants me to ask for a refund now

ForceHSS
02-07-2015, 12:37 PM
Still waiting for the email

TheInsaneManiac
02-09-2015, 02:30 AM
I resent the email out. Please let me know if no one receives it.

ForceHSS
02-09-2015, 02:37 AM
Still nothing, please check you are sending it to the correct email address if it is right, maybe there is a problem with your email client

megabink
02-09-2015, 06:29 AM
No email here!

ForceHSS
02-09-2015, 02:02 PM
Will be another two days before he replies lol

TheInsaneManiac
02-11-2015, 01:19 AM
Will be another two days before he replies lol

One day. So :p lol

I'm trying to be more active, again working two jobs and a side project for a client leaves me with little free time, but I'm trying and apologize again in advance.

Just a little update, I am waiting on reply from Sellfy why no one is receiving updates for the product, however if you PM me your email that you purchased the pro version with I can verify everything and PM it to you.

ForceHSS
02-11-2015, 01:21 AM
One day. So :p lol

I'm trying to be more active, again working two jobs and a side project for a client leaves me with little free time, but I'm trying and apologize again in advance.

Just a little update, I am waiting on reply from Sellfy why no one is receiving updates for the product, however if you PM me your email that you purchased the pro version with I can verify everything and PM it to you.
I will pm you it again and a few others just in case

megabink
02-11-2015, 07:50 PM
Got my pro update today via pm!

TheInsaneManiac
02-14-2015, 01:28 AM
Got my pro update today via pm!

Let me know where false detections are coming from if you receive any now.

megabink
02-14-2015, 04:55 PM
Let me know where false detections are coming from if you receive any now.

Will keep you updated!

Alibass
02-15-2015, 05:36 PM
Apparently 1.9.3 [free version] doesn't detect TOR :erm:

woodmj
02-28-2015, 12:03 PM
Hi, Is there anyway in latest pro version to let LAN proxies through but still block all other types?

TheInsaneManiac
03-10-2015, 10:10 PM
Hi, Is there anyway in latest pro version to let LAN proxies through but still block all other types?

Yes it's in the options in the AdminCP just disable Tor and Web proxy alert.


Apparently 1.9.3 [free version] doesn't detect TOR :erm:

What do you mean? Have you used TOR and it's letting you in?

leemart44
03-20-2015, 01:12 AM
thanks for updates how do I get update for paid one I bought from you?

woodmj
04-18-2015, 05:43 AM
Ref my purchase of Proxy Alert Pro.

I have had a couple of my forum members complain that they can't connect to the forum as they are being flagged as using a proxy. Checking out their IPs they are using either US cable company or ATT cell/mobile internet connections. I did think about whitelisting the IP ranges associated with those companies but the Whitelist function in the Proxy Alert section of the ACP does not allow ranges to be input using CIDR notation and so it would entail listing approx 75,000 odd IPs for each company to cover all 3 of the ranges.

Please would you be able to suggest a better solution?

I did check to see whether I have the most current version of Proxy Alert Pro through the link in my purchase e-mail and it looks like I already have the most current version of 1.93?

woodmj
04-21-2015, 10:02 AM
Also Redirect To Message does nothing for me. I have to use Redirect To Blank Page to get the software to take any action.

ForceHSS
04-21-2015, 05:38 PM
Ref my purchase of Proxy Alert Pro.

I have had a couple of my forum members complain that they can't connect to the forum as they are being flagged as using a proxy. Checking out their IPs they are using either US cable company or ATT cell/mobile internet connections. I did think about whitelisting the IP ranges associated with those companies but the Whitelist function in the Proxy Alert section of the ACP does not allow ranges to be input using CIDR notation and so it would entail listing approx 75,000 odd IPs for each company to cover all 3 of the ranges.

Please would you be able to suggest a better solution?

I did check to see whether I have the most current version of Proxy Alert Pro through the link in my purchase e-mail and it looks like I already have the most current version of 1.93?
You have the option to not ban groups who use proxies have you set this option yet in admincp/options/Proxy Alert: Permissions = Usergroup

woodmj
04-22-2015, 05:43 AM
Thanks ForceHSS I will try that.

The thing is though the biggest thing I'm trying to use this mod for is to scan non logged in members/guests to try and stop hacking activity so I have it set to scan members and non-members. What you suggest might be a workaround if the members concerned still have a forum cookie on their PCs with their login credentials in.

Do you know if there's anyway to get in touch with the developer of this mod? Does he provide support to those that have purchased the pro version?

ForceHSS
04-22-2015, 05:46 AM
Thanks ForceHSS I will try that.

The thing is though the biggest thing I'm trying to use this mod for is to scan non logged in members/guests to try and stop hacking activity so I have it set to scan members and non-members. What you suggest might be a workaround if the members concerned still have a forum cookie on their PCs with their login credentials in.


Do you know if there's anyway to get in touch with the developer of this mod? Does he provide support to those that have purchased the pro version?
The last time he was on 11 Mar 2015, 00:10 as you see he does not get on much you could try pming him

woodmj
04-22-2015, 02:34 PM
Good plan. Will do.

liadben
04-24-2015, 06:10 AM
I've installed the PRO version. its work! like and use it!

woodmj
04-24-2015, 07:45 AM
I disabled it for now until I can get in touch with the mod author on the 2 issues I found. The main one being the blocking of non-proxy connections as proxy connections. It was generating too many member complaints and cutting my traffic.

the one
05-18-2015, 08:01 AM
Hello all i want to thank ForceHSS for letting me know this thread existed

I would love to have the pro version where can i get it please.

ForceHSS
05-18-2015, 10:05 AM
Hello all i want to thank ForceHSS for letting me know this thread existed

I would love to have the pro version where can i get it please.

PM the coder to buy it

the one
05-18-2015, 03:14 PM
Ok so i went and paid for the pro version

I then tested my website via this proxy address here https://hide.me/en/proxy.It then showed this message below

https://vborg.vbsupport.ru/external/2015/05/12.jpg

I thought brilliant it works then i then tried another 10 proxy websites and out of them ten i could view my forum on 6 of the proxy sites.So does this plugin only work on a select few proxy sites

These are my settings in admin cp below are they correct

https://vborg.vbsupport.ru/external/2015/05/13.jpg

https://vborg.vbsupport.ru/external/2015/05/14.jpg

ForceHSS
05-18-2015, 04:12 PM
persistent = yes
page message = <span style="color:red;">You were detected using a proxy! For security reasons, we do not allow this on our community. Please disable the proxy or switch browsers if it is built in. Thank you.</span>
change the colour to what you want

the one
05-18-2015, 06:30 PM
Thank you so much

the one
05-19-2015, 04:05 AM
It looks like i am going to have to disable this unless anyone can help

This is the first message i got fro a member

Hi Guys,
My regular computer and tablet cannot log in. Its says I'm using a
proxy but I don't use one, my only connection is wi-fi

This is another message below

hi this is mojo,
the proxy plugin wont allow me and i dont use a proxy server, just wifi...

woodmj
05-19-2015, 08:00 AM
I had similar problems with the pro version too and too had to disable for now on my forum due to member complaints.

I'm not sure what else to try to try and get in contact with the author. I posted here and sent them a PM here but as yet have not received a response.

Do let me know if you have any luck getting in touch with them and I'll of course return that favour.

the one
05-19-2015, 10:13 AM
I will let you know and i have also sent a pm and email to the author

I didn't mind paying for this, it was only 10$,But i am a bit upset that i have had to disable it straight away.

It does not do exactly what it says but i guess thats the gamble

ForceHSS
05-19-2015, 10:56 AM
It looks like i am going to have to disable this unless anyone can help

This is the first message I got from a member

Hi Guys,
My regular computer and tablet cannot log in. It says I'm using a
Proxy but I don't use one, my only connection is WiFi

This is another message below

Hi, this is mojo,
The proxy plugin won't allow me and I don't use a proxy server, just wifi...
If you go over all settings you can stop this picking up member groups so it only works with guests so if he sees it as a guest once he logins he won't get the proxy message

kushal
09-01-2015, 11:45 PM
It looks like i am going to have to disable this unless anyone can help

This is the first message i got fro a member

Hi Guys,
My regular computer and tablet cannot log in. Its says I'm using a
proxy but I don't use one, my only connection is wi-fi

This is another message below

hi this is mojo,
the proxy plugin wont allow me and i dont use a proxy server, just wifi...

Generally many countries allow LAN Proxy through Network service provider. The services are being provided through a proxy. I disabled just the LAN Proxy and things seems to be normal.

TheInsaneManiac
09-11-2015, 04:36 PM
Thanks ForceHSS I will try that.

The thing is though the biggest thing I'm trying to use this mod for is to scan non logged in members/guests to try and stop hacking activity so I have it set to scan members and non-members. What you suggest might be a workaround if the members concerned still have a forum cookie on their PCs with their login credentials in.


Do you know if there's anyway to get in touch with the developer of this mod? Does he provide support to those that have purchased the pro version?

Sorry, there hasn't been many suggestions or posts in this topic in awhile so I haven't been actively following it, but that is a wonderful idea to scan non members and post alerts. I do still plan on bringing a logging system to this plugin, but haven't had the time. With this new plugin I had an idea for and have started working on, I could actually port the logging system from it over and have that as well, so that you can just monitor everything, members or non members.


Ref my purchase of Proxy Alert Pro.

I have had a couple of my forum members complain that they can't connect to the forum as they are being flagged as using a proxy. Checking out their IPs they are using either US cable company or ATT cell/mobile internet connections. I did think about whitelisting the IP ranges associated with those companies but the Whitelist function in the Proxy Alert section of the ACP does not allow ranges to be input using CIDR notation and so it would entail listing approx 75,000 odd IPs for each company to cover all 3 of the ranges.

Please would you be able to suggest a better solution?

I did check to see whether I have the most current version of Proxy Alert Pro through the link in my purchase e-mail and it looks like I already have the most current version of 1.93?
I thought I implemented ip ranges, but I will take a look into this.


I disabled it for now until I can get in touch with the mod author on the 2 issues I found. The main one being the blocking of non-proxy connections as proxy connections. It was generating too many member complaints and cutting my traffic.

I would recommend only using TOR detection if you want to block any members as proxy and web proxy detection could be falsely triggered from a non dynamic IP.


If you go over all settings you can stop this picking up member groups so it only works with guests so if he sees it as a guest once he logins he won't get the proxy message
Thank you for your assistance in my absence. It appears I am not getting emails from my subscribed threads, I will be reaching out to the vB team in regards to this. In the meantime I will keep an eye on my PMs while I am working to push out my new product, which will aim to prevent spam and possibly multiple account creation.

the one
12-27-2015, 04:35 AM
Hi all only me again i deleted this by accident

I am running 4.2.1 and have uploaded the files correctly but its not blocking tor network

It was before is there something i am now doing wrong or is there a specific download for 4.2.1 or is this not compatible with any other plugin.

Also i cant find my pro version i paid for would i need to pay for this again TheInsaneManiac


Many thanks for any help

the one
12-27-2015, 08:33 AM
Hi i was told you could block the tor network in the firewall for csf

Does anyone know where this is i have tried looking but cant find it

Many thanks

the one
12-28-2015, 06:40 AM
Ok i have downloaded and reinstalled the pro version.

All i want to do is block tor but its not working.This is a screen shot below

https://vborg.vbsupport.ru/external/2015/12/7.png

I have had to use my csf firewall in whm to help with the block for now

Is there something i am doing wrong or does this not work if you have other ip plugins installed i have Duplicate IP Report by BOP5

woodmj
12-28-2015, 07:33 AM
Try enabling Redirect Blank. I recall when I was using the mod it didn't work for me if I didn't have that enabled.

the one
12-28-2015, 09:06 AM
Try enabling Redirect Blank. I recall when I was using the mod it didn't work for me if I didn't have that enabled.

Thats great it now works just gives a blank page it would have been cool to have been able to have a message but that dont work.

The normal Redirection Would you like to block access to the forums and redirect to your own message does not work i think it does for proxy but not for tor.For tor to be blocked like you said i had to enable redirect blank.

thanks

TheInsaneManiac
03-23-2016, 01:17 AM
Are you using the pro version? Need to figure out which to troubleshoot.

edgeless
03-23-2016, 01:19 AM
Are you using the pro version? Need to figure out which to troubleshoot.Never mind... you were too fast for me :o. I cleared the cookies and it's now working :up:

edgeless
03-25-2016, 02:18 PM
Okay, it does work... but I'm encountering a few problems. And one of them is a fairly serious one.

I'll start with the most serious problem. There is no combination of settings that I have been able to find which will allow registration from what I fear may be many mobile devices. For testing I'm using my own cell phone. The test is to try and use it to register as a new member on my forum site. Prior to each test, I freshly clear its cookies and other private data. The problem is that PApro persistently interprets these efforts as proxy connections and blocks me at the registration page. This happens even with the Tor, LAN, and Web Proxy options set to "no" and the Members option set to "yes". And it doesn't matter if the Registration Only option is set to "yes" or "no". The vB message with the text that I entered for the proxy_alert_registration phrase consistently appears and blocks every registration attempt from this cell phone.

I have a theory about this issue, but at the moment I have no way to test it. My theory is this: The IPs assigned to my phone (its service is through Consumer Cellular) do not have rDNS hosts. That is, none of the dhcp IPs leased to my cell phone can be reverse-resolved to host names (i.e., there are no PTR records for them). If PApro uses rDNS lookup as a criterion to approve each IP as being a non-proxy address, then this may be why these IPs are not passing. But as I've said, I have no immediate way of testing this theory, since I only have the one cell phone. I could have some of my members or staff test this theory with their mobile devices by clearing their cookies and then attempting registration. But that tends to become a bit awkward so I'm holding off for now. And of course users who contact admin due to a registration refusal are usually not the best options as test subjects.

The next matter of concern is that my testing has shown that for some reason when the Registration Only option is set to "yes", my registration attempts through Tor will randomly slip through to my forum's registration form. And this is with confirmation that my Tor exit node IP has NOT changed each time it happens. Again, this issue does seem to only occur when the Registration Only option is set to "yes". I haven't been able to duplicate it with that option set to "no"... at least yet.

My last observation is trivial... but I'll still mention it. It is that even when I have the Location option set to "no" while the Registration Only option is set to "no" as well, the PA popup message seems to only appear on the main forum index page. Isn't the Location option being set to "no" supposed to cause this popup message to appear on all pages? This is obviously not a serious problem. It's only an observation at this point.

Thanks for reading... if anyone has any thoughts I'll sure be interested.


EDIT:
I had one of my staff test the reg process using their mobile device - it acquires IP addresses which will in fact properly resolve to host names. Like my mobile IPs, hers are as well managed by AT&T Mobility; they are just different numerical blocks. She was able to get through the registration process without issue. I think that serves as fairly good evidence that the lack of PTR records for the IP blocks that my phone has access to has been responsible for PApro rejecting the registration efforts from my phone. The 2nd issue, intermittent slip throughs on Tor connections, may require some further testing on my part.

EDIT2:
Okay. I've done some more testing on the second issue. As mentioned, when the Registration Only option is set to "no", all Tor connections are blocked and the "proxy connections are not allowed" message is consistently presented as expected - i.e., registration does not occur and the proxy_alert_registration message is displayed. However, when the Registration Only option is set to "yes", the system will randomly fail to display the proxy_alert_registration phrase and instead moves to the next stage, which is the new member information entry form page. But when this happens, once the member information has been entered and the 'Complete Registration' button has been clicked, no registration occurs -which is good- but the vB message which then appears is not about proxies at all... instead it is: "Your email is marked as spam." Below is a screenshot.

https://vborg.vbsupport.ru/external/2016/03/5.pngDoing a search for phrases, the above message phrase is shown to be the contents of email_mark_as_spam. I'm unsure though why this message phrase is triggered by PApro ? So that's my first question. And my next question is why, when the Registration Only option is set to "yes", do Tor connections randomly alternate between allowing the user to reach the member information entry form stage (followed by display of the email_mark_as_spam message), or terminating immediately after the birth date is entered with a prompt display of the proxy_alert_registration message? The important thing of course is that this mod seems to block Tor users. It just doesn't do the same thing each time if the Registration Only Option is set to "yes". At least that's what I'm finding.

Any ideas as to why I'm noticing this behavior?

Dave
03-25-2016, 02:27 PM
Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.

edgeless
03-25-2016, 08:13 PM
Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.I'm not sure. I don't have a wifi-equipped router here and there are no wifi access points near enough to me to try. But I have contacted AT&T IP Support who handle their DNS servers and they have confirmed that the PTR records are missing from the IP ranges that my phone has access to. They emailed me that they have submitted a request to the team who administers the mobile ip DNS servers to add the PTR records for the affected ip blocks. They said the problem should be corrected by sometime next week. Once it is fixed (if in fact that occurs), I will test it with my phone and report back here.

edgeless
03-30-2016, 01:12 AM
AT&T came through and added the PTR records. The two /24 IP blocks that my phone's IPs come from all resolve to host names now. But unfortunately that wasn't the problem. What was, and is the problem is the fact that the only APN available to my phone through its current provider goes through a proxy. So the public IPs that it's given by the dhcp server are in fact proxy IPs. Which, of course, means that my phone being detected by PA as using proxy connections is accurate. I believe there are some comments about mobile carriers using proxy IPs earlier in this thread.

Question: Does the IP Whitelist provision in PApro allow the use of CIDR or wildcards? I'm hoping I don't have to individually allow each IP.

edgeless
03-30-2016, 04:48 PM
Whitelisting is nice - but heck, I can?t go through 8.000 dynamic IP?s each day and add them one by one to the list. Esp. nearly every mobile carrier uses proxies, where the half is beeing detected false as TOR-users. As I had the mod activated my mailbox turned into pandoras box with complaints over complaints.

Unless there is no data-service which handles & checks (!) the ip?s and ip-ranges for proxies, I wouldn?t recommend to use this on boards with >500 members.This is exactly the problem! The system falsely detects certain mobile carrier proxy IPs as Tor exit nodes. Therefore, you can't turn off these false detections without turning off Tor detection altogether. Personally, I could get by if there were a way to whitelist IP ranges. But it appears that there isn't. It's really a shame because this system has tremendous potential. But as it stands, auto blocking the registration efforts of legitimate potential members stands to discourage them from ever trying to register again. This problem really needs to be worked out in order to make this an outstandingly useful and dependable add-on.

It also seems difficult to get the developer to address these concerns for some reason :(

Thr33
07-26-2016, 09:54 PM
im getting an error:

PHP Warning: require_once(..../includes/functions_proxyalert.php): failed to open stream: No such file or directory in ..../global.php(29) : eval()'d code on line 4

Fatal error: require_once(): Failed opening required '/home/litereco/public_html/x2/includes/functions_proxyalert.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/litereco/public_html/x2/global.php(29) : eval()'d code on line 4

rhody401
07-27-2016, 07:39 PM
From the error you posted, it looks like perhaps the files were not all uploaded to your server. (the includes sub folder, etc)

Double check that, perhaps?

Thr33
07-27-2016, 07:53 PM
When i first read your comment i thought "how stupid does this guy think i am"...

I re-uploaded all the files and the modification works :| Thanks.

From the error you posted, it looks like perhaps the files were not all uploaded to your server. (the includes sub folder, etc)

Double check that, perhaps?

MarkFL
07-27-2016, 09:44 PM
The developer should click the "Additional Files" option then, to make it more clear that files need to be uploaded to the server. :)

Thr33
07-27-2016, 10:21 PM
I know I know... egg on my face. (shamed)