vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Miscellaneous Hacks - Check Proxy RBL on New User Registration. (https://vborg.vbsupport.ru/showthread.php?t=131852)

DaNIEL MeNTED 11-19-2006 12:37 PM

Quote:

Originally Posted by NiTRoN (Post 1120617)
maybe this product can expand to also allow multiple ip checking sites.. not just 1.. also Custom msg explaining why the registration was denied with admin option to enable or disable it. The msg would show in format of vbulletin error msg instead being PM one..

my 2cents.. otherwise this is great idea for a product. Looking very promising.. maybe it could evolve into some front-end security suite for vbulletin, but who knows.. its me just dreamin.

Hi Nitron.

There is an error message that is displayed to the user in the standard vb error display format. You can edit exactly what it says by editing the phrase DM_found_in_rbl.

The PM option allows you, as an admin, to receive a PM with the IP when its blocked.

I will look at adding multiple RBLs in the next version.

NiTRoN 11-20-2006 01:22 AM

oh sweet.. just got confused by what the options were for.. since there was no clear explanation.. :)

can the PM options have drop down menu and let you chose PM or EMAIL?
You can solve that by making one line option with multiple boxes..
example

"Notify Following UserID's [enter userid# here] by [drop down box with options EMAIL/PM] about failed registrations"
and user id "0" would disable that whole option.

Tom1234 11-20-2006 07:35 PM

Isn't the sbl-xbl.spamhaus.org blacklist a list of IP's that are used by email spammers? I'd expect that to be successful for blocking email spam, but that is not the same as blocking anonymous http proxy sites like Proxify.

countrycheck.com used to try to keep track of anonymous http proxy servers, but they seem to have gone out of business. Their site has contained just an error message for a few weeks now.

DaNIEL MeNTED 11-20-2006 10:59 PM

Quote:

Originally Posted by Tom1234 (Post 1121747)
Isn't the sbl-xbl.spamhaus.org blacklist a list of IP's that are used by email spammers? I'd expect that to be successful for blocking email spam, but that is not the same as blocking anonymous http proxy sites like Proxify.

countrycheck.com used to try to keep track of anonymous http proxy servers, but they seem to have gone out of business. Their site has contained just an error message for a few weeks now.


spamhaus.org rolls up a number of other RBLs. You can also specify whatever RBL you want to use.

Tom1234 11-21-2006 03:24 AM

Which Spamhaus (or other source) RBL contains anonymous http proxy servers?

Hornstar 11-21-2006 05:32 AM

When you say open proxy, does that mean aol is not blocked?

DaNIEL MeNTED 11-21-2006 12:34 PM

Quote:

Originally Posted by Tom1234 (Post 1122031)
Which Spamhaus (or other source) RBL contains anonymous http proxy servers?

From spamhaus.org:

Quote:

Incorporates CBL data and NJABL proxy data

The XBL wholly incorporates data from two highly-trusted DNSBL sources, with tweaks by Spamhaus to maximise the data efficiency and lower False Positives. The main components are:
- the CBL (Composite Block List) from cbl.abuseat.org
- the NJABL Open Proxy IPs list from www.njabl.org.
http://www.spamhaus.org/xbl/index.lasso

Obviously many of those open proxy IPs reflect mailservers but I have had some success with IPs found googling "anonymous HTTP proxy" getting blocked.

I'm still looking for a proper list of anonymous web proxies.

Quote:

Originally Posted by hornstar1337 (Post 1122080)
When you say open proxy, does that mean aol is not blocked?


That is correct - AOL is not blocked because it is proxying for its customers.

DaNIEL MeNTED 11-21-2006 12:54 PM

I have been doing some testing with different RBL's and google'd lists of open proxy servers... so far list.dsbl.org seems to return the most "hits" for known proxy IPs.

I will be testing it out to see if I get any false positives and may update the product to use it as a default... more info: http://dsbl.org/main

The Finman 11-25-2006 05:38 AM

Wow, this has actually been really effective sinced I installed it a couple of days ago.:up:

My only recommendation would be maybe an option that let you designate a post notification in the forum choice of the Admin (such as a Private Forum for mods and/or admins), instead of the PM notifiications. The AE multiple account detector does that.

Other than that, good job! :up:

I've combined this with other proxy hacks (such as Paul M's Proxy to Real IP hack) with some good success. :)

DaNIEL MeNTED 11-26-2006 08:45 PM

Quote:

Originally Posted by The Finman (Post 1124651)
Wow, this has actually been really effective sinced I installed it a couple of days ago.:up:

My only recommendation would be maybe an option that let you designate a post notification in the forum choice of the Admin (such as a Private Forum for mods and/or admins), instead of the PM notifiications. The AE multiple account detector does that.

Other than that, good job! :up:

I've combined this with other proxy hacks (such as Paul M's Proxy to Real IP hack) with some good success. :)

Thanks... I'll look at adding that for the next version.


All times are GMT. The time now is 08:19 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01269 seconds
  • Memory Usage 1,746KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete