vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Miscellaneous Hacks - Check Proxy RBL on New User Registration. (https://vborg.vbsupport.ru/showthread.php?t=131852)

falter 12-19-2006 06:51 PM

Quote:

Originally Posted by DementedMindz (Post 1141764)
yeah im looking at opm.tornevall.org now as they have a few on there too im reading about it here http://opm.tornevall.org/ cause say you go to http://anonymouse.org you can get right by all these things.

There might be political reasons why Anonymouse.org isn't listed in either of the ones that I use...I can't say for certain. opm.tornevall.org looks pretty good, actually. I think I might be adding it to my list, since it only deals with open proxies.

Also, ircbl.ahbl.org (http://www.ahbl.org/docs/ircbl.php) might work. Here's how AHBL describes it:
Quote:

This list contains only the proxy and DDoS drone data from our main list, without extras such as the Spam Sources list and Shoot On Sight.
My only concern is the inclusion of "DDoS drone data" ... this data is outside of the scope of an Open Proxy, so I'm a bit hesitant to make use of it.

DementedMindz 12-19-2006 07:01 PM

yeah im going to try out opm.tornevall.org and see how it works out. yeah Anonymouse.org had me puzzled cause it gets right by everything. But ill be looking around today to see what I can come up with. as for ircbl.ahbl.org im going to look more info up on that one now also.

sinisterpain 12-19-2006 08:46 PM

I obviously do not wish to block out legit people, but as of the last few days we have had more than our usual registrations and most from third world countries.
These people would register than make a post pointing to either a trojan or some advertisement or both. We never had these issues till recent and as of right now most people who were refused registration from the RBL checker program were listed as big time spammers.

falter 12-19-2006 08:55 PM

Quote:

Originally Posted by sinisterpain (Post 1141836)
I obviously do not wish to block out legit people, but as of the last few days we have had more than our usual registrations and most from third world countries.
These people would register than make a post pointing to either a trojan or some advertisement or both. We never had these issues till recent and as of right now most people who were refused registration from the RBL checker program were listed as big time spammers.

I'm confused, were the people who posted these things coming from the IPs that were listed as "big time spammers"? Or did you get several of these attacks, and then enabled this add-on and observed that people were registering from IPs of "big time spammers" ?

What were the IPs of the people who posted the ads/trojans?
What were the IPs of the spammers?
What BL's are you using?

My point in my earlier post was that people should be aware of what they are getting into when using the blacklists like they are.

sinisterpain 12-19-2006 09:08 PM

I have been inundated recently with guest registering on our forum and the only purpose is to place spam on our board. I personally used spamhaus.org in the checker. But have reviewed the ips through dnsstuff.com and all the ip that were caught were listed as spammers and not small time either. I had one guy trying to register with a bogus email. One person registered and placed a link to trojan file which my antivirius flaged immediately and prompted me to remove the link from the board. Obviously I can not post IPs here but I will say that the person was comming out of Germany.

I will not just refuse people but to date the ones who have been caught are known spammers and I do check to make sure.

Tom1234 12-26-2006 07:13 PM

Forum post made by this mod says "This registration attempt has been allowed." even when it is set to not allow the registration.

I think you missed an "s":

if ($DM_rblcheck_allowreg == "0") {

should be:

if ($DM_rblcheck_allowregs == "0") {

DaNIEL MeNTED 12-29-2006 01:18 AM

dang... you're right. Will upload a new file.

Brew 12-29-2006 02:53 AM

I'm not really sure this mod is working or not...but...

There is one thing I would like to see.

A way to add a warning on the registration page that users using a proxy will not be allowed to finish registration.

Thanks!

Brew

sinisterpain 01-02-2007 08:24 PM

Thanks for the update on this, I was being overun with spamers and this hack caught about 95% of the problems before registration.

Tom1234 01-03-2007 12:50 PM

I seem to be getting about 5 new threads created on each RBL match. I can't tell if the person registering is somehow looping through the registration process multiple times (like maybe they didn't enter all the required information and had to re-enter the form) or if it's a bug. They really shouldn't keep registering since I have it set to allow the registration attempt on RBL match. Since the timestamp of the posts often span a few minutes time, I suspect it is not a bug with this product.

Anyone else seeing this?


All times are GMT. The time now is 01:06 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01298 seconds
  • Memory Usage 1,742KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete