vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Board Optimization - Proxy Alert (https://vborg.vbsupport.ru/showthread.php?t=299546)

the one 12-27-2015 04:35 AM

Hi all only me again i deleted this by accident

I am running 4.2.1 and have uploaded the files correctly but its not blocking tor network

It was before is there something i am now doing wrong or is there a specific download for 4.2.1 or is this not compatible with any other plugin.

Also i cant find my pro version i paid for would i need to pay for this again TheInsaneManiac


Many thanks for any help

the one 12-27-2015 08:33 AM

Hi i was told you could block the tor network in the firewall for csf

Does anyone know where this is i have tried looking but cant find it

Many thanks

the one 12-28-2015 06:40 AM

Ok i have downloaded and reinstalled the pro version.

All i want to do is block tor but its not working.This is a screen shot below

https://vborg.vbsupport.ru/external/2015/12/7.png

I have had to use my csf firewall in whm to help with the block for now

Is there something i am doing wrong or does this not work if you have other ip plugins installed i have Duplicate IP Report by BOP5

woodmj 12-28-2015 07:33 AM

Try enabling Redirect Blank. I recall when I was using the mod it didn't work for me if I didn't have that enabled.

the one 12-28-2015 09:06 AM

Quote:

Originally Posted by woodmj (Post 2561258)
Try enabling Redirect Blank. I recall when I was using the mod it didn't work for me if I didn't have that enabled.

Thats great it now works just gives a blank page it would have been cool to have been able to have a message but that dont work.

The normal Redirection Would you like to block access to the forums and redirect to your own message does not work i think it does for proxy but not for tor.For tor to be blocked like you said i had to enable redirect blank.

thanks

TheInsaneManiac 03-23-2016 01:17 AM

Are you using the pro version? Need to figure out which to troubleshoot.

edgeless 03-23-2016 01:19 AM

Quote:

Originally Posted by TheInsaneManiac (Post 2567880)
Are you using the pro version? Need to figure out which to troubleshoot.

Never mind... you were too fast for me :o. I cleared the cookies and it's now working :up:

edgeless 03-25-2016 02:18 PM

Okay, it does work... but I'm encountering a few problems. And one of them is a fairly serious one.

I'll start with the most serious problem. There is no combination of settings that I have been able to find which will allow registration from what I fear may be many mobile devices. For testing I'm using my own cell phone. The test is to try and use it to register as a new member on my forum site. Prior to each test, I freshly clear its cookies and other private data. The problem is that PApro persistently interprets these efforts as proxy connections and blocks me at the registration page. This happens even with the Tor, LAN, and Web Proxy options set to "no" and the Members option set to "yes". And it doesn't matter if the Registration Only option is set to "yes" or "no". The vB message with the text that I entered for the proxy_alert_registration phrase consistently appears and blocks every registration attempt from this cell phone.

I have a theory about this issue, but at the moment I have no way to test it. My theory is this: The IPs assigned to my phone (its service is through Consumer Cellular) do not have rDNS hosts. That is, none of the dhcp IPs leased to my cell phone can be reverse-resolved to host names (i.e., there are no PTR records for them). If PApro uses rDNS lookup as a criterion to approve each IP as being a non-proxy address, then this may be why these IPs are not passing. But as I've said, I have no immediate way of testing this theory, since I only have the one cell phone. I could have some of my members or staff test this theory with their mobile devices by clearing their cookies and then attempting registration. But that tends to become a bit awkward so I'm holding off for now. And of course users who contact admin due to a registration refusal are usually not the best options as test subjects.

The next matter of concern is that my testing has shown that for some reason when the Registration Only option is set to "yes", my registration attempts through Tor will randomly slip through to my forum's registration form. And this is with confirmation that my Tor exit node IP has NOT changed each time it happens. Again, this issue does seem to only occur when the Registration Only option is set to "yes". I haven't been able to duplicate it with that option set to "no"... at least yet.

My last observation is trivial... but I'll still mention it. It is that even when I have the Location option set to "no" while the Registration Only option is set to "no" as well, the PA popup message seems to only appear on the main forum index page. Isn't the Location option being set to "no" supposed to cause this popup message to appear on all pages? This is obviously not a serious problem. It's only an observation at this point.

Thanks for reading... if anyone has any thoughts I'll sure be interested.


EDIT:
I had one of my staff test the reg process using their mobile device - it acquires IP addresses which will in fact properly resolve to host names. Like my mobile IPs, hers are as well managed by AT&T Mobility; they are just different numerical blocks. She was able to get through the registration process without issue. I think that serves as fairly good evidence that the lack of PTR records for the IP blocks that my phone has access to has been responsible for PApro rejecting the registration efforts from my phone. The 2nd issue, intermittent slip throughs on Tor connections, may require some further testing on my part.

EDIT2:
Okay. I've done some more testing on the second issue. As mentioned, when the Registration Only option is set to "no", all Tor connections are blocked and the "proxy connections are not allowed" message is consistently presented as expected - i.e., registration does not occur and the proxy_alert_registration message is displayed. However, when the Registration Only option is set to "yes", the system will randomly fail to display the proxy_alert_registration phrase and instead moves to the next stage, which is the new member information entry form page. But when this happens, once the member information has been entered and the 'Complete Registration' button has been clicked, no registration occurs -which is good- but the vB message which then appears is not about proxies at all... instead it is: "Your email is marked as spam." Below is a screenshot.

https://vborg.vbsupport.ru/external/2016/03/5.pngDoing a search for phrases, the above message phrase is shown to be the contents of email_mark_as_spam. I'm unsure though why this message phrase is triggered by PApro ? So that's my first question. And my next question is why, when the Registration Only option is set to "yes", do Tor connections randomly alternate between allowing the user to reach the member information entry form stage (followed by display of the email_mark_as_spam message), or terminating immediately after the birth date is entered with a prompt display of the proxy_alert_registration message? The important thing of course is that this mod seems to block Tor users. It just doesn't do the same thing each time if the Registration Only Option is set to "yes". At least that's what I'm finding.

Any ideas as to why I'm noticing this behavior?

Dave 03-25-2016 02:27 PM

Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.

edgeless 03-25-2016 08:13 PM

Quote:

Originally Posted by Dave (Post 2568002)
Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.

I'm not sure. I don't have a wifi-equipped router here and there are no wifi access points near enough to me to try. But I have contacted AT&T IP Support who handle their DNS servers and they have confirmed that the PTR records are missing from the IP ranges that my phone has access to. They emailed me that they have submitted a request to the team who administers the mobile ip DNS servers to add the PTR records for the affected ip blocks. They said the problem should be corrected by sometime next week. Once it is fixed (if in fact that occurs), I will test it with my phone and report back here.


All times are GMT. The time now is 09:06 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01310 seconds
  • Memory Usage 1,756KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete