vb.org Archive - Add-On Releases - DnP Firewall : SEO Friendly Double-Protection Layers against Flood / DoS / Spam Bots

Page 3 of 5

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)

- - Add-On Releases - DnP Firewall : SEO Friendly Double-Protection Layers against Flood / DoS / Spam Bots (https://vborg.vbsupport.ru/showthread.php?t=221739)

relaxiha

09-22-2009 05:32 PM

hello i think should update it

JasonGD

09-25-2009 08:29 AM

Works great so far! *clicks install*

bigcurt

09-26-2009 12:29 AM

So, a user visits my site and the first thing that is displayed is this? Is that correct?

Thanks,
Curt

silveryhat

09-26-2009 03:58 AM

Yes, it applies to everyone but search engines.

vnairp11

09-26-2009 09:09 AM

i have this issue please fix

Warning: session_start() [function.session-start]: open(/tmp/sess_b22c70d5b06ff6082f4112d732e050ab, O_RDWR) failed: Permission denied (13) in /home/xxxxx/public_html/dnp_fw.php on line 3

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/vnairp11/public_html/dnp_fw.php:3) in /home/xxxxx/public_html/dnp_fw.php on line 3

vnairp11

09-26-2009 05:23 PM

it used to work but ever since i transferred the site this has been happening and i love this mod pleas help..

bigcurt

09-27-2009 12:05 AM

Quote:

Originally Posted by silveryhat (Post 1890703)

Yes, it applies to everyone but search engines.

OK, one more thing. Would this happen only once and be based on cookies or will it happen every single time to a user?

Thanks,
Curt

silveryhat

09-27-2009 03:25 PM

As long as the user session alive, the firewall gateway does not appear again. ;)

Quote:

Originally Posted by vnairp11 (Post 1890934)

it used to work but ever since i transferred the site this has been happening and i love this mod pleas help..

This is a server side misconfiguration. If you could contact your host provider, mention that apache temp folder for function session_start is not writable by local script.

need2fart

10-04-2009 09:51 AM

I am unsure about installing this mod. Recently I've been receiving DDoS attacks, about 300 zombies were flooding my forum with a UDP flood... Will this help me lol? I get flooded by medium attacks like 300-500 zombies. =\

Will this have any effect or save my forum? I hate having my host banning all the IP's and I soon find out half my members were infected with botnets. This has all been fixed but, still I'm bracing for another DDoS attack soon.

On a scale of about 1-10

If I got DDoSed by about 100 zombies, would my forum still load with this hack?
Normally if I get attacked by 100 zombies I do lose connection to the server -

Thanks man I've been looking for a good firewall for preventing DDoS. I'm sad hostgator doesn't offer ddos hardware protection.

jchamber2010

10-05-2009 01:40 AM

How hard it to change your Useragent? I know that in firefox it is really quite easy to do using About:Config, same with seamonkey. This wouldn't offer protection at all if the DDoSer knew about it.

big219

10-05-2009 10:40 AM

Thank you for this awesome mod, hopefully it does the job
it is suppose to do. Keep up the great work silveryhat!!

Regards,
Kev

silveryhat

10-06-2009 05:43 PM

Quote:

Originally Posted by need2fart (Post 1894568)

On the situation of 100+ bots , the firewall could reduce the attack 20-80% theoretically, depend on what technique it uses and what type of flooding it is, xFlash or IMCP flooding etc...

As the matter of fact, you should also deny these ips or the the ones cause the most requests during the flood occurrence , then remove the list after it has gone.

Quote:

Originally Posted by jchamber2010 (Post 1894939)

How hard it to change your Useragent? I know that in firefox it is really quite easy to do using About:Config, same with seamonkey. This wouldn't offer protection at all if the DDoSer knew about it.

It still has two layer of protections even if user-agent is fake. You can give it a try :)

Quote:

Originally Posted by big219 (Post 1895082)

Thank you for this awesome mod, hopefully it does the job
it is suppose to do. Keep up the great work silveryhat!!

Regards,
Kev

I'm developing a newer version based on a new bounce back technique, still waiting for feedback from my professors though. ;)

James Birkett

10-07-2009 12:00 PM

My apologies if this is already answered but i'm short for time at the minute:

Does it log IP addresses of potential DDoS attempts?

jchamber2010

10-07-2009 09:48 PM

Quote:

Originally Posted by silveryhat (Post 1895749)

...t still has two layer of protections even if user-agent is fake. You can give it a try :)...

I can make your website think my browser is the Google Bot, so it's either going to let me in, and believe that I'm the googlebot OR it's going to be blocking the real googlebot

Dr.LoVe

10-08-2009 10:06 AM

Parse error: syntax error, unexpected ':', expecting ')' in /home/xxx/public_html/vb/dnp_fw_config.php on line 29

??

silveryhat

10-08-2009 03:21 PM

Quote:

Originally Posted by James Birkett (Post 1896072)

My apologies if this is already answered but i'm short for time at the minute:

Does it log IP addresses of potential DDoS attempts?

This is my respond to a similar concern :)

Quote:

It was one of my concern when I first start coding the mod. I believe generating logs during an attack will consume alot of server resource and I want the minimize the amount of damage to the forum so log feature has been removed.

Quote:

Originally Posted by jchamber2010 (Post 1896327)

I can make your website think my browser is the Google Bot, so it's either going to let me in, and believe that I'm the googlebot OR it's going to be blocking the real googlebot

The two other protection is the 2nd layer protection and cookie check ;) , too many requests will disable the session no matter if the visitor is bot agent or not.

Quote:

Originally Posted by Dr.LoVe (Post 1896514)

Parse error: syntax error, unexpected ':', expecting ')' in /home/xxx/public_html/vb/dnp_fw_config.php on line 29

??

You have done some misconfiguration. Try to use the original file or post the content of your dnp_fw_config.php and I'll check for you.

Dr.LoVe

10-08-2009 04:17 PM

i didn't do anything just add my website link look here

Code:

<?

//List of Search Engine Agents

$UserAgent = array(

        'Googlebot',

        'msnbot',

        'slurp',

        'fast-webcrawler',

        'Googlebot-Image',

        'teomaagent1',

        'directhit',

        'lycos',

        'ia_archiver',

        'gigabot',

        'whatuseek',

        'Teoma',

        'scooter',

        'Ask Jeeves',

        'slurp@inktomi',

        'gzip(gfe) (via translate.google.com)',

        'Mediapartners-Google',

        'crawler@alexa.com'

);



//Your forum *domain only*

//Define domain with and without www

//Do not add trail at the end

//Example : 'google.com' , 'www.google.com'

$Forum_domain = array(

        ‘http://xxxx.com’,

        ‘http://www.xxxxx.com’,



);



//2nd Layer Flood Protection enable ?

//1 to enable , 2 to disable

$config['dnp_firewall_2nd_layer'] = 1 ;



//Amount of time in second to show restrict message if a Flooding attack is determined

$config['dnp_firewall_wait_time'] = 10 ;



//Amount of penalty to be considered a Flooding attack. 

//Every time multiple requests sent to the forum in less than few a second, penalty count increased by 1.

$config['dnp_firewall_penalty_allow'] = 6;

?>

And another thing if you don't mind could you tell me when should i upload those files ?
( public_html or vb file )??

thanx

silveryhat

10-11-2009 01:33 AM

Quote:

Originally Posted by Dr.LoVe (Post 1896689)

i didn't do anything just add my website link look here

And another thing if you don't mind could you tell me when should i upload those files ?
( public_html or vb file )??

thanx

It's nothing much wrong, only that you have to use the right single quotes :). Here is the fix :

PHP Code:


		
			
<?

//List of Search Engine Agents

$UserAgent = array(

    'Googlebot',

    'msnbot',

    'slurp',

    'fast-webcrawler',

    'Googlebot-Image',

    'teomaagent1',

    'directhit',

    'lycos',

    'ia_archiver',

    'gigabot',

    'whatuseek',

    'Teoma',

    'scooter',

    'Ask Jeeves',

    'slurp@inktomi',

    'gzip(gfe) (via translate.google.com)',

    'Mediapartners-Google',

    'crawler@alexa.com'

);



//Your forum *domain only*

//Define domain with and without www

//Do not add trail at the end

//Example : 'google.com' , 'www.google.com'

$Forum_domain = array(

    'http://xxxx.com',

    'http://www.xxxxx.com',



);



//2nd Layer Flood Protection enable ?

//1 to enable , 2 to disable

$config['dnp_firewall_2nd_layer'] = 1 ;



//Amount of time in second to show restrict message if a Flooding attack is determined

$config['dnp_firewall_wait_time'] = 10 ;



//Amount of penalty to be considered a Flooding attack. 

//Every time multiple requests sent to the forum in less than few a second, penalty count increased by 1.

$config['dnp_firewall_penalty_allow'] = 6;

?>

vnairp11

10-17-2009 04:36 AM

excellent mod nominated thanks :)

JasonGD

10-17-2009 07:02 AM

Back with a little update, it's been about 3 weeks since installing, and I've had absolutely no spammers! That's definitely a nice change from the 1 a day I was getting beforehand. ;)

This thing rocks!

|Jordan|

10-20-2009 06:56 PM

When i have this mod enabled, and when i click the image to enter my site, i get the following url: dnp_fw.php?dnp_firewall_redirect='.%24_SERVER['REQUEST_URI'].'

and the page just goes back to the DnP page. What am i doing wrong? It even does it when i didnt edit any DnP files. The website server is using a Firewall though that has HTTP filters to enabled to prevent exploits.

Also, your link to "InV-Firewall Script" leads to a page in another language, can you link to a page in english?

silveryhat

10-26-2009 02:05 PM

Quote:

Originally Posted by JasonGD (Post 1901234)

Quote:

Originally Posted by vnairp11 (Post 1901200)

excellent mod nominated thanks :)

Thanks for the nice feedbacks guys, ;)

Quote:

Originally Posted by |Jordan| (Post 1902785)

Have you tried to figure out what are being filtered by the web server firewall ? For all the time the firewall is just a type of plug and play mod, if there is something wrong it is more likely a misconfiguration for from the host side itself.

silveryhat

10-29-2009 04:43 AM

Quote:

Originally Posted by |Jordan| (Post 1906462)

The firewall blocks requests with the following strings:
...

So anything in there that could be blocking this mod from working properly? Or are my firewall settings adequate enough to do the same thing this mod does?

The firewall you are using seems to block or , like you describe, convert characters. This, more likely is used to avoid malicious query being executed but on the other hand it will interrupt the process of other MODs and for DnP Firewall apparently. What firewall are you using? Is it software or hardware? Because if it only blocks certain commands, it does not protect your site against flooding, dos and spambots.

fta2k

10-29-2009 05:00 PM

Everything seems to be working fine here.

LeHHeL

10-30-2009 05:30 AM

Just a small issue, on PHP files use LONG TAG like <?php not <? , if is disabled, cannot run.

|Jordan|

10-30-2009 06:13 AM

I'd rather not say what firewall im using because it will open security issues.

What characters does DnP in the url tag?

|Jordan|

11-01-2009 11:40 PM

Well. I finally figured out what was causing my problems! And it wasnt my firewall!

I changed all the <? of the DnP php files to <?php and now it works flawlessly!

P.S. silveryhat, can you edit your post id of 104 (this post) and remove your quote about my firewall info. I'd rather not have it online anymore.

P.S.S I'm trying to download INV firewall, but cant because theres no username to access the download page (there's only a password)

maddoghalo1

11-02-2009 03:19 AM

Is there a way to make it so when ever someone leaves my website and they come back it makes them go thorugh that portal again? I have to dissconnect from my internet then reconnect to get the gateway to pop up again when I re visit the site. When I leave the site, then open browser and go back to my site, it goes to my site and the gateway part does not pop up. I want it to pop up every time someone visits my site even if they leave it for 5 seconds.

silveryhat

11-02-2009 05:24 PM

Quote:

Originally Posted by |Jordan| (Post 1909179)

I have done so ;)

Quote:

P.S.S I'm trying to download INV firewall, but cant because theres no username to access the download page (there's only a password)

This is a firewall script written by a local Vietnamese coder. Try Shacker and Delynie for the username and password to access. Further support of INV firewall is not available here because this topic is for DnP Firewall. However, you may ask about it on the official forum, which its link is provided below.

Quote:

Originally Posted by maddoghalo1 (Post 1909237)

The gateway is designed to appear only once in the first time user establishes a connection to the forum. This session expires after an amount of time, depends on your server setting. Since the way you require is not how the firewall should work for everyone, you might want to make a personal request on the official forum.

need2fart

11-04-2009 02:31 AM

Dear Silveryhat,

This script works good it stopped the spammers from attacking one of my pages, but I looked today and I have a few errors in my error log, can you help me fix them?

Here are the errors:

Code:

[03-Nov-2009 01:14:43] PHP Warning:  require_once(./global.php) [<a href='function.require-once'>function.require-once</a>]: failed to open stream: No such file or directory in /home/delta/public_html/showthread.php on line 104

[03-Nov-2009 01:14:43] PHP Fatal error:  require_once() [<a href='function.require'>function.require</a>]: Failed opening required './global.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/delta/public_html/showthread.php on line 104

Thanks.

silveryhat

11-04-2009 04:44 AM

._. Are you sure the warning message comes from the firewall ? The firewall integrates itself into global.php not requiring it , while the error means showthread.php is looking for global.php but not found. It looks more like a intermittent server issue.

|Jordan|

11-10-2009 03:10 AM

Now when i click the link in firefox i get the following error "Sorry, Connection from your IP Address is not allowed!" Clicking the link in IE shows my site normally. Any idea why its doing this suddenly?

silveryhat

11-10-2009 05:19 PM

Quote:

Originally Posted by |Jordan| (Post 1912245)

Have you added your forum domain to the domain list in dnp_fw_config.php ? ( Setup Domain List for DnP Firewall Gateway )

|Jordan|

11-10-2009 05:24 PM

Yes i added them.

The link works fine in IE, but in firefox it doesnt for some weird reason. It's been working fine previous days but suddenly stopped working.

Edit: NM i found the problem, my firefox had referrer header disabled. Enabling it again fixed it.

profanitytalker

11-17-2009 05:07 PM

Has anyone here seen a decrease in traffic from both real users and bots using this hack?

silveryhat

11-23-2009 04:03 AM

Quote:

Originally Posted by profanitytalker (Post 1916030)

Has anyone here seen a decrease in traffic from both real users and bots using this hack?

It is SEO friendly.

RedTrinity

11-25-2009 08:59 PM

I installed this 2 days ago and it appears to be working correctly, however 2 spambots still managed to register and spam our forum overnight??

I had to turn the flood protection off due to numerous complaints by members, but the firewall has been still functional up until this point... so not sure why it hasn't worked in these instances...

silveryhat

11-26-2009 06:02 AM

Quote:

Originally Posted by GamerGirl27 (Post 1920892)

There is a different between spam bots and spammers. Those who can spam with the firewall on are not bots. They are human and they do that on purpose.

You are able to change the flood protection settings following this guide Detail information about DnP Firewall 2nd Layer Protection :)

carleboy

01-06-2010 11:34 PM

Cant get this working on vb 4 any one know how ??? please :)

could be somthing to do with this but i dont know ??

Code:

error_reporting(E_ALL & ~E_NOTICE);



require('./includes/class_bootstrap.php');

 





define('VB_AREA', 'Forum');

define('VB_AREA etc isnt the first command in the global.php any more.

The fire wall just gets stuck on the gateway and wont go though to the forum.

Thanks in advance for your help...

manuelg1201

01-25-2010 02:37 PM

its working for me but some users after clicking here to continue they are not redirected into the forum. why?

All times are GMT. The time now is 01:01 PM.

Page 3 of 5

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01697 seconds Memory Usage 1,862KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_code_printable (1)bbcode_php_printable (21)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: