vb.org Archive
Page 4 of 5 « First 23 4 5
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   DNSBL/Open Proxy-Blocking (https://vborg.vbsupport.ru/showthread.php?t=96318)

Loony BoB 09-15-2006 09:44 AM
Questions from a techy admin at my forums:

Is there an option to only scan users when logging on/are logged on, to reduce the amount of scanning even further?
Also, can it log anywhere whenever it does detect someone trying to use a proxy in case we need to troubleshoot a false positive or something?
And what sort of error message does someone detected as an open proxy receive?

Chadi 09-17-2006 06:04 PM
Where is "ip-field" to check if its set as key or not? If it is set as key, what should I do then?

TMM-TT 09-19-2006 09:50 AM
Sorry for the delayed answer.. :cry:

Quote:
Originally Posted by chadi
Where is "ip-field" to check if its set as key or not? If it is set as key, what should I do then?

The table is called proxycache and the field 'ip'.

If the key is missing, this command to the sql should fix it:

ALTER TABLE proxycache ADD PRIMARY KEY(`ip`);

Chadi 09-19-2006 08:06 PM
field "ip" is already there..what to do now?

TMM-TT 09-19-2006 08:59 PM
Quote:
Originally Posted by chadi
field "ip" is already there..what to do now?
Can you see if it has a primary key?
If you think it hasn't, try the command I gave before -
ALTER TABLE proxycache ADD PRIMARY KEY(`ip`);

Hopefully, that'll help..If not, you can try to reinstall the product or use...
OPTIMIZE TABLE proxycache
alt.
REPAIR TABLE proxycache

...instead

venomx 09-19-2006 10:17 PM
I would like one like this that used the list from http://www.ahbl.org/docs/ircbl.php

Also would be nice to have one that checked the URLS people put it their posts and blcok them if they are listed on lists we select.

TMM-TT 09-20-2006 08:29 AM
Quote:
Originally Posted by venomx
I would like one like this that used the list from http://www.ahbl.org/docs/ircbl.php
If you want the standard support, just add ircbl.ahbl.org to the DNSBL list in the configuration (attached example). I'll try add specific support for it in the next version.



Quote:
Originally Posted by venomx
Also would be nice to have one that checked the URLS people put it their posts and blcok them if they are listed on lists we select.
Do you mean like if someone posts www.freeporn.com into the forum, that post should be blocked if it's listed in the BL?

Loony BoB 09-22-2006 06:02 AM
Quote:
Originally Posted by Loony BoB
Questions from a techy admin at my forums:

Is there an option to only scan users when logging on/are logged on, to reduce the amount of scanning even further?
Also, can it log anywhere whenever it does detect someone trying to use a proxy in case we need to troubleshoot a false positive or something?
And what sort of error message does someone detected as an open proxy receive?
Any chance of an answer to these questions? I need to know before we can go ahead with implementing this on our forums. Thanks in advance. :)

TMM-TT 09-22-2006 06:50 AM
Quote:
Originally Posted by Loony BoB
Any chance of an answer to these questions? I need to know before we can go ahead with implementing this on our forums. Thanks in advance. :)
There is no option for that yet, but can be fixed. :)

Do you want it to work with the login.php-script only, and if a userid is equal to a logged in user?

Loony BoB 09-26-2006 12:57 PM
That sounds good - If my techy has other thoughts I'll be sure to post them.

Also, is there any chance of knowledge on the second two questions?

Thanks once again for all your help. :)

pzykotic 09-26-2006 02:31 PM
I just installed this on my forum and it blocked me. I'm using Optimum Online at home and a leased line from VERIO at work. No clue why both are blocked as proxies. Any thoughts?

TMM-TT 09-26-2006 03:15 PM
Quote:
Originally Posted by pzykotic
I just installed this on my forum and it blocked me. I'm using Optimum Online at home and a leased line from VERIO at work. No clue why both are blocked as proxies. Any thoughts?
If you can't log in to your forum, enter

define(DISABLE_HOOKS, 1);

to your config.php so you can disable the blocker while you're investigating...

Then check www.tornevall.net/cgi-bin/ip.cgi if that page says where you might be blacklisted (I just wrote a FAQ about the blacklist part).

You can also add your ip into the configuration under "Exclude from monitor". Then it won't block you.

It looks like there's a few problems with proxyblocking on admins. I'll take a look on some solutions on this. Maybe a function for "only look for logged in" users, so you have a chance to login before getting blocked. :)

Loony BoB 09-27-2006 08:26 AM
My techy's response...

Quote:
Originally Posted by cl_out
https://vborg.vbsupport.ru/external/2006/09/2.gif

Checking on logging in only wouldn't be good enough, especially if you tell your browser to "remember" to be logged in via cookies - you could even log in normally, then hop over to a proxy :p Checking whenever the user isn't a guest is good :p Of course, an option to only check when the user tries to post/PM/other database-changing function might be better than for every page request, but that's not important at the moment :p

I can always find out the answer to the error message question I asked by myself if we implement it, having access to multiple IP addresses simultaneously to post from :p I suppose the logging bit isn't that important right now either since I now noticed it says it caches IPs for a few hours, since we can then use an SQL query instead on the cache table, though it would be nice if with the IP it stored the username that attempted to connect from it in there as well :p

TMM-TT 09-27-2006 09:13 AM
Quote:
Originally Posted by Loony BoB
My techy's response...
Quote:
tell your browser to "remember" to be logged in via cookies - you could even log in normally, then hop over to a proxy

How about something like this?

Let's say someone is logging into a forum in the normal way. After this, he switch to a proxy. The RBL checks if there's any changes from the last activity (with a limit of like 10 minutes so we're sure we don't block all dynamic users - besides, it should only look after proxys anyway, so that might not interfere with normal activity), and if the new ip is detected as a proxy, the users again gets blocked...

Loony BoB 10-03-2006 08:00 PM
I've passed that on to my techy again. :D He's constantly going on about how it should include usernames in the proxycache at the moment... don't know if that's something you can do?

On a sidenote, is there any way for me to do a check on an IP to see if it is really an open proxy? I know there are sites that will check my own PC, but I'm not sure if there are sites that allow me to check other people's IPs. This would help me be reasonable when dealing with people who have complained that they can no longer get in.

PS. I have to say, you're definitely one of the more helpful guys I've experienced at these kind of boards. Thanks for your continuing assistance!

EDIT: Here's the response from our techy after quoting you to him...

Quote:
Originally Posted by cl_out
Yeah, I saw that post, but I thought that's how it worked anyway? I thought it checked if the user's IP is in the database, it uses that data. Then if the user hops to a proxy (or changes IP address because he's dynamic), obviously his IP will be different so I thought it would check again anyway? I didn't know it cached if the user was clean, then it remembers the user, regardless of his IP address.

I originally mentioned the possibility of the address changing in context of if you only checked when the user logs on rather than all the time like it currently does, which wouldn't be when you want to check anyway. When I asked about only checking for users logging on/are logged on, I should have made it clearer by saying we don't care to check guests (or spiders) if they're using a proxy or not, since they can't post anyway, hence only continuously checking actual users logged in :p

DementedMindz 10-07-2006 05:14 PM
TMM-TT do you know if this works on 3.6.x

TMM-TT 10-07-2006 11:34 PM
Quote:
Originally Posted by DementedMindz
TMM-TT do you know if this works on 3.6.x
Yes it does :)

DementedMindz 10-08-2006 12:01 AM
thank you.

Snake 10-11-2006 09:17 AM
What about v3.6.2?

venomx 10-11-2006 09:27 AM
Quote:
Originally Posted by TMM-TT
Do you mean like if someone posts www.freeporn.com into the forum, that post should be blocked if it's listed in the BL?
That would be nice if it didnt slow the site down too much..

NickCat 10-12-2006 11:57 PM
Quote:
Originally Posted by TMM-TT
Can you see if it has a primary key?
If you think it hasn't, try the command I gave before -
ALTER TABLE proxycache ADD PRIMARY KEY(`ip`);

Hopefully, that'll help..If not, you can try to reinstall the product or use...
OPTIMIZE TABLE proxycache
alt.
REPAIR TABLE proxycache

...instead
I am trying to install this on 3.6.0 and I'm getting the same database errors this user was.

Code:
Invalid SQL:
INSERT INTO proxycache (ip, listed, dateline) VALUES ('75.11.10.116', 0, 1160700950);

MySQL Error  : Duplicate entry '75.11.10.116' for key 1
Error Number : 1062
Date        : Thursday, October 12th 2006 @ 08:55:54 PM
Script      : http://forums.nasioc.com/forums/forumdisplay.php?f=112
Referrer    : http://forums.nasioc.com/forums/forumdisplay.php?f=23
IP Address  : 75.11.10.116
Username    : Unregistered
Classname    : vb_database
And the IPs do already have records, so it's trying to insert a ip that's already been inserted. Shouldn't the code check to see if it's been inserted before trying to insert it again or run an update?

I have the primary key setup properly for ip.

I have repaired, optimized the proxycache table, but still no luck getting away from this error.

Necrosaro420 11-03-2006 10:35 PM
Quote:
Originally Posted by DementedMindz
TMM-TT do you know if this works on 3.6.x

I get nothing but errors with this sent to my email =(

zagman76 12-06-2006 11:52 PM
I added 'aol.com' to the 'exclude from monitor' section, but it is still blocking AOL users from registering. as much as i'd like to block AOL users... :) ... is this a bug or am I doing something wrong?

Thanks!

TrIn@dOr 12-13-2006 12:53 PM
Thanks, really usefull!

StEaLtH666 12-20-2006 09:05 PM
i have just installed this and first must say thanks :)

however im having a few problems with a few of my regular behaved members getting blocked, and so far it just seems those who are with pipex, and bulldog isp's but only those with a static ip.

i have added exceptions etc but the only thing i could do to get them working is input their whole ip, whereas id rather be able to put in a partial ip to the exception list such as 81.86.*.* , but this doesnt work.

is there anyway i can make this happen, or maybe possible to add it to an update please :)

many thanks

zagman76 12-25-2006 06:33 PM
Quote:
Originally Posted by StEaLtH666 (Post 1142456)
i have just installed this and first must say thanks :)

however im having a few problems with a few of my regular behaved members getting blocked, and so far it just seems those who are with pipex, and bulldog isp's but only those with a static ip.

i have added exceptions etc but the only thing i could do to get them working is input their whole ip, whereas id rather be able to put in a partial ip to the exception list such as 81.86.*.* , but this doesnt work.

is there anyway i can make this happen, or maybe possible to add it to an update please :)

many thanks
just out of curiosity - did you try entering the exception as:
81.86.*
rather than: 81.86.*.* ...?

vBul seems to favor the x.y.* format.

I still can't get this add-on to work properly with AOL users.

zagman76 01-16-2007 04:15 AM
If this setting:
Code:
Block on registration
Only block users on newuser-registrations
is set to "No" - does that make it so this mod checks when people have already registered? In other words - expanding the mod out from only new user registration?

Apophis 03-15-2007 01:30 AM
Quote:
Originally Posted by NickCat (Post 1095887)
I am trying to install this on 3.6.0 and I'm getting the same database errors this user was.

I have the primary key setup properly for ip.

I have repaired, optimized the proxycache table, but still no luck getting away from this error.
I am encountering the same problems as well. I configured this product to only block new registrations. I assumed that if you only block new registrations it will only check to see if an IP is blocked when a user tries to register. No such luck. :(

Is there any fix for this "Duplicate entry" issue?

Richy R 05-14-2007 08:33 PM
There is no like manual with it, where on earth do you put it in the ACP??

Richy R 05-15-2007 03:48 AM
worked it out :) thanks

TMM-TT 08-05-2007 07:31 PM
Just updated my own forum with this one, that hopefully gets rid of a resolver-problem. Please report bugs, if you find them. :)


// 2007-08-05
//
// * Fixed reported bug, based on resolved hosts ending with 127
// * Changed database-tables to get rid of (hopefully) duplicate keys
// * Added resolver-function
// * Added two new block-methods available at the efnet-rbl

Administered from admin -> options -> DNSBL/Open Proxy monitoring

If you still have problems with duplicate keys, try reinstall the new version from scratch. I've removed the keying, to see if it works better without it. I think I should take care of some other problems reported here too, like the exclusion-part, so admins also can exclude domains (not just IP's) from the checking.. At least try, since I guess extra resolving takes extra time..

dfiedler 11-02-2007 05:46 AM
...then grandly attempted to demonstrate it to my wife by looking up "free web proxy" on Google and connecting with the first thing I saw, which turned out to be a network of web-based proxies at http://www.privax.us

Not only wasn't it blocked by this plugin, but I copy/pasted the entire list of their proxy sites into the proper place in the Admin Control Panel, and it still wasn't blocked!

I am no longer sure this thing is even working...how can I check?

Thanks in advance.

TMM-TT 11-02-2007 06:03 AM
I don't know how other proxy-blockers works, but webproxies are added manually into the dnsbl at tornevall.org (at least for the moment).

You can test ip's by adding them into this url: http://dnsbl.tornevall.org/scan.php?ip=XXXX (where XXXX is the IP)

Like this: http://dnsbl.tornevall.org/scan.php?ip=149.9.0.58

Edit: It seems that all those sites listed at privax is using the same exit...

TMM-TT 11-02-2007 09:12 AM
Quote:
Originally Posted by dfiedler (Post 1374022)
Not only wasn't it blocked by this plugin, but I copy/pasted the entire list of their proxy sites into the proper place in the Admin Control Panel, and it still wasn't blocked!
I saw that I missed explaining this part so I'll do that too

If you want to block hosts based on webproxys you must add the exit-ip into the controlpanel. Some proxies have different "exits" compared to the website you're testing from.

Anyway, I've added some anonymous webproxies into the dnsbl now, so if you want to test some of them, I think you can do that now. :)

dfiedler 11-02-2007 09:29 AM
Quote:
Originally Posted by TMM-TT (Post 1374079)
I saw that I missed explaining this part so I'll do that too

If you want to block hosts based on webproxys you must add the exit-ip into the controlpanel. Some proxies have different "exits" compared to the website you're testing from.

Anyway, I've added some anonymous webproxies into the dnsbl now, so if you want to test some of them, I think you can do that now. :)
I'm not sure what you mean by "exits", but I did see that the first proxy listed used an address like w2.hidemyass.com when browsing so that's what I put in the control panel.

Anyway thanks for the fast response!

Emarkay 12-19-2007 05:22 PM
Outstanding! Works great.

Any way we can edit the error message? I tried looking around but couldn't come up with how to do it.

TMM-TT 12-19-2007 06:24 PM
Quote:
Originally Posted by Emarkay (Post 1404781)
Outstanding! Works great.

Any way we can edit the error message? I tried looking around but couldn't come up with how to do it.
Fun to hear that! :)

The error message is a global phrase called OPM_Deny.

bulbasnore 08-07-2008 07:41 AM
installed

worked on http://hidemyass.com

TMM-TT 08-07-2008 05:53 PM
Quote:
Originally Posted by bulbasnore (Post 1593203)
installed

worked on http://hidemyass.com
The ip I got from that site when I tried to use it, was added to Tornevall DNSBL at 2007-11-02. Maybe you have the wrong settings for the plugin?

You should enable the option "opm.tornevall.org: Block anonymizers".

Killy01 08-08-2008 08:15 AM
Thanks for this, good modification should help stop people spamming on proxies.

Cheers ;)

Killy


All times are GMT. The time now is 09:14 PM.
Page 4 of 5 « First 23 4 5
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02024 seconds
  • Memory Usage 1,850KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (21)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete