Hey guys... sorry I haven't replied in a while. Moved jobs + a new baby and I've been insanely busy...

Before the month is over I will try and code a new version that addresses everyone's requests...

Welcome back! :)
If your not busy any more, please try to add the following:

Suggestions:
Allowing us to enter a ban reason in the settings of the AdminCP.
Option to disable site viewing. (Simply blocks the user from the site.)

congrats on the new job and baby

cool to see this imrpoved a bit more, it nearly perfect as it is. Just cut down the work if it ran the check after all the other checks are passed. Also put less strain on the database


since incorpating nospam and this addon we not had any spam

can anyone running nospam check the plugin and see where it hooks and what # its running at?

<hookname>register_addmember_process</hookname>

it use multiple hooks as it protect multiple areas.

on area it also protect unless the person has signed in in the contact us page.

Any chance this program protecting that as well.

Damien

any many thanks

There should also be an "Execution Order" # on that page...

Well, what started as a 5 line hack has - IMHO - reached the point where I think the feature set is quite significant.

I have fixed -
. reporting errors.
. the post IP = blocked IP issue (it is now 1.2.3.4)

I have made the following feature changes -
. added ability to specify error message someone sees when blocked.
. added ability to specify the group to add banned accounts to.
. added ability to specify a reason for being banned.
. added ability to specify a custom title for banned users.
. added the ability to place users in COPPA Users Awaiting Moderation queue - or another moderation queue.
- updated reporting to reflect new features.
. changed adminCP options order / titles / etc. to clean things up.
. changed the RBLs - # used, order, etc.

Basically, as I am testing it, out of the box the configuration will be:

Allow users to register, do not ban them, but place them in the moderation group.

If you enable banning it will automatically skip the moderation part.

If you choose to block registration it will never get far enough to mod/ban because the account isn't created.

I've finished those dev changes and am testing - I still need someone to tell me the hook order for those other hacks so I can have the checker fire AFTER they do... otherwise I should be uploading a new file within the week.

<plugin active="1" executionorder="1">
<title>Check if NoSpam! question has been answered correctly</title>
<hookname>register_addmember_process</hookname>

the plug in also covers searchs
new post by un reg users
searches by un reg users
contact us by un reg users

if you need any of the hooks for those or other hooks in nospam let me know and i will do my best

Just to clear this up - it does.

The hook of the plugin (there's now actually 2...) so the hook of the RBL checking plugin is at register_addmember_process... This is to allow blocking of registration. If you don't have blocking turned on then the first plugin still does the check and generates notifications...

The 2nd plugin needs to fire after the new member has been added to the DB so it runs at register_addmember_complete. Depending on the options selected it either bans or flags the new member for moderation.

Thanks for the update!
Edit: Is there a way so that it will completely block them out? Even from the home page? So, that they have no access whatsoever? (Like, as soon as the user comes on the website, it will check the IP) Or is that just too many queries?

You really need to do that at the server itself.

If you are running Apache, I recommend using an .htaccess file to bounce them anywhere on the internet you want to, as well as any troll boards or websites linking to you (you can combine both features into one .htaccess file).

Blocking users by IP at the server using .htaccess

Blocking users/ sites by referrer using .htaccess

Although, technically any time a server has to check and verify a query, it is taking additional time and the more queries it has to check & verify, it does increase the time involved. However, on any given day I have about 30 banned IPs & sites in our .htaccess files on various VPS accounts, but I can't notice any appreciable time difference. However, the servers these VPS accounts are located on are very fast...so I suspect, any noticeable time lag will vary on how big your .htaccess list is, and how fast your server itself is.

Oh, thank you very much but, I'll stick with the Vbulletin IP banning system for now. I have bookmarked those links though in case if I need them in the future. :) Thanks!

Here's a list of proxy ip's i took from proxy4free.com (the first site thats listed when you type "free proxy list"). Keep in mind the list always changes, but here it is anyways:

Here is every IP listed on their site:
Enjoy!

Remeber the more IPs you add to the "blacklist" the longer it takes to process a registration... I'm not sure what list length will = a performance degredation.

The new version is amazing thankyou.

Just one thought (not too worried about it) but would be intresrtead in you view and view of other peoples.

Current user, is it worth checking to see if current user and using proxies. Maybe only doing it once or maybe one a wekk or something.

What do people think

Thank you.

Personally I think once they're registered it doesn't matter ... I originally wrote this hack to deal with trolls more than with spammers, the fact that it blocks spammers is a bonus as far as I'm concerned. We've been lucky - at 1500 members we have only had 1 troll. I've been on other boards where the same trolls keep re-registering after getting banned, in 99% of cases they're using a proxy to get around the IP ban.

This kills alot of their options...

The next thing I'm going to do is look at updating the "known proxies" list... not with the IPs from those open proxy sites - most of those IPs get on the RBLs pretty quick - but with sites that are specific for anon-web surfing. They don't tend to get on RBLs as much...

What about web based proxies? Like anonymouse.org

just tested that and unfortunately it got pass the protection


how ever it does transmit its host name there for could itbe blcoked with htaccess based on hostname????

this is the details of that site

IP 85.195.123.29
Host anonymouse.org
Browser & OS http://Anonymouse.org/ (Unix)

See my post above... the next thing I'll be doing is spending some time updating the "known proxies" section - places like "anonymous" don't get added to the RBLs effectively enough...

what we need is a database that can be shearch for these sites

We have about 170 people registering per day. Since installing this hack, the amount of spam on the forums has dropped off by maybe 90% or more.
I have had one or two complaints from what sound like genuine users.
Here is such a message
This occasional event aside, it's a very positive hack :up:

Its odd that fastweb's natting addresses are on a RBL. I would add the IPs to the whitelist.

Can you PM me with the fastweb.it IPs as well, I'll like to check them against the RBLs and see where the hits are coming from/why.

Thanks!

I'd love to but I have absolutely no idea what they are.

Does this hack also work on site like proxy.org? I ask because I found out a few of my banned members were using that as a "work-around"....:cool:

Just installed this hack due to trolls in my forum. Hopefully this will take care of them.

C.

Ok I heard back from the person using Fastweb. He said
So Fastweb can remain in the blacklist as far as I'm concerned.

I've got this installed on a 3.6.4 board ( with the security patch) and it is generating 5 PM's and 5 threads every time it detects someone and although I've said allow registration to continue appears to banning them anyway.

Any ideas what could be causing this?

Darat, I think this post explains your problem (and mine since I am seeing the same as you):
https://vborg.vbsupport.ru/showpost....&postcount=107

Hello, will this still work if I have installed:

Proxy to Real I.P. Detector located here

https://vborg.vbsupport.ru/showthread.php?t=120082

Thanks for any info.

I am getting below database error to my email ???

No idea, uninstall and reinstall with the latest version. Let me know if that fixes it...


That post has nothing to do with multiple hits - the issue there is people getting blocked before the captcha fires, leading to extra hits from bots. There are now 2 plugins, one that fires on reg and one at reg_complete...

There is no adminid in the mySQL query...

[high]* DaNIEL MeNTED points up at the install instructions...
[/high]

How can i add the adminid?

In the adminCP go to the settings for the RBL checker - the third option (you can see it in the first screenshot above) is CONFIG - Username for Bans & Notifications ... put in a username of the admin user and then you can use notifications and bans...

I was just able to register perfectly fine with xroxyx.com and youhide.com and it didn't block me at all?

this is confusing

You'll note earlier in the thread I mention the fact that specific proxy sites don't get added to RBLs. I'm working on getting access to a liveupdating blocklist than includes these sites for the next version.

Not sure it has been meantioned but take a look at
http://oldwww.temp.ahbl.org/docs/ircbl.php