The Arcive of Official vBulletin Modifications Site.

DNSBL/Open Proxy-Blocking · **Released**: 09-14-2005

History

I've had some problems with abuse via open proxies for a time ago, and when we were banning abusers, they always found a new proxy to use and register new accounts with. Since this forum was a large type we could'nt just ban e-mails etc just like that, because this was leading to a very large amount of other banned users too.

At IRC, in the other hand, we had Open Proxy Monitors, that was banning everything that was blacklisted in some DNSBL-databases. No spammers had a chance to get in there as long they were listed in such database.

This is a plugin that blocks blacklisted hosts from some different DNSBL's. It uses the global_start-hook, a very simple handler for blocking proxies, and a vBphrase called OPM_Deny.

April 2006

The source has been rewritten a bit. The proxychecker is now using a cache that, by default, stores all ip's in a database for 6 hours. It scans some DNSBL's and can be configured to block proxies from bitmasks (defined in the plugin) which makes it a little bit more reliable, because it does'nt block everything it see).

Configuration is made from the plugin (hopefully there will be a nice admin interface in the future). Exceptions (ip's that can pass through this system even if it is a proxy) are also handled differently now.

// CHANGES
//
// 2008-09-20 (2.0.8)
//
// * Changed the routines for how to handle inclusion/exclusions
// * Splitted up plugins for 3.5/3.6 and 3.7
//
// 2007-08-05
//
// * Fixed reported bug, based on resolved hosts ending with 127
// * Changed database-tables to get rid of (hopefully) duplicate keys
// * Added resolver-function
// * Added two new block-methods available at the efnet-rbl
//
// 2006-06-28 (2.0.6/Another fix)
//
// * Proxyinclusions/exclusions didn't work properly
//
// 2006-06-28 (2.0.5/Fix only)
//
// * Fixed a bug in the $block-array that affected some of the blocking results
//
// 2006-06-28 (2.0.4)
//
// * opm.tornevall.org has a new entry for anonymizers, added support for this
// * Default value on "block everything detected" in plugin changed to "no"
//
// 2006-06-26 (2.0.3)
//
// * Created options for admincp (removed plugin-configuration)
// * Fixed a bit-bug for njabl
// * Plugin is now a function (rbl_livecheck) for external lookups
// * Added options for "only block on newuser-registrations"
//
// 2006-06-22 (2.0.3 RC)
//
// * The monitor is now a function
// * Added small compatibility with other plugins (with return)
//
// 2006-05-13
//
// * sorbs zones added (no bitmasking)
// * opm.blitzed.org removed
// * time() changed to TIMENOW
//
// 2006-04-21
// ==========
//
// * proxyinclusions
// quickly add own hosts that should be treated as a proxy
//

How does it work with other vBulletins?

This filter actually works with both 3.5 and 3.6, but for now, they will be separate versions, but for 3.5 and 3.6 you should look here and for 3.7 you should look here.

How to use the compatibility thing

If you have a plugin that you want to use together with the proxy monitor (only returns a value if a an ip-address is registered as a proxy or not) you can call the function rbl_livecheck like this (example):

PHP Code:


			
global $rblInstalled;

if ($rblInstalled) {
$remoteIsProxy = rbl_livecheck(1, $_SERVER['REMOTE_ADDR']);

//
// .. your code here ..
//

}

Report bugs if you find them...

Don't forget to install it

kofoid · #**102** 06-16-2006, 06:30 PM

Help? I uninstalled this hack and people are still being blocked!

TMM-TT · #**103** 06-21-2006, 10:09 PM

Sorry for all delayed answers...

Quote:

Originally Posted by chadi

MySQL Error : Duplicate entry '62.252.64.13' for key 1 Error Number : 1062

I think a database repair on the table proxycache should fix duplicate entries. I've got the same problems, specially with sessions those moments, when my server completely locked up so I had to force a reboot and that table is also fixed the same way.

Quote:

Originally Posted by dmva93

I do have a question..I've installed the hack, is that it, install it and it's good to go, nothing to configure?

Everything is (still) made from the plugin code. I've been working with a troll-tracker tonight, that can be configured via admincp settings so I hope I can fix it for this product too.

Look for this code in the plugin, for configuration (below):

PHP Code:


			
// Configuration (this should be moved to the admin panel)

// 0 = off, 1 = on

Quote:

Originally Posted by wolfyman

What I want is to disallow people on proxies to register, I don't want the script to check any further than that.

I have a version 2.0.3 in my hand now, and that code works as a function so it can be called from other plugins too. With an admin interface, there might be a chance that this can be fixed easier than today.

Quote:

Originally Posted by kofoid

Help? I uninstalled this hack and people are still being blocked!

If it's uninstalled, it shouldn't do anything, so this is very strange. Do you still have the same problem?

TMM-TT · #**104** 06-26-2006, 11:01 PM

It's still 2.0.3 but some changes to the configuration has been made. The request for another function has also been added, refering to this request

// 2006-06-26
//
// * Created options for admincp (removed plugin-configuration)
// * Fixed a bit-bug for njabl
// * Plugin is now a function (rbl_livecheck) for external lookups
// * Added options for "only block on newuser-registrations"

TMM-TT · #**105** 06-27-2006, 10:58 PM

Minor modifications has been made to the source. The first one is only a default value (look below

). The second change affect opm.tornevall.org - an extra separate entry has been added to the DNS-database for anonymizers (like iphide.com and anonymouse.org, the only two web-based anonymizers I know actually). I think blocking of proxy-by-web-anonymous-services can be useful in some way, somewhere.

// 2006-06-28
//
// * opm.tornevall.org has a new entry for anonymizers, added support for this
// * Default value on "block everything detected" in installer changed to "no"

titter · #**106** 06-27-2006, 11:46 PM

Thanks! I was waiting for those 2 to be blocked :]

TMM-TT · #**107** 06-28-2006, 03:43 AM

Quote:

Originally Posted by titter

Thanks! I was waiting for those 2 to be blocked :]

And now, it works better. Just found a bug in the $block-part, that should be fixed now..

titter · #**108** 06-28-2006, 05:07 AM

haha another mod on my car site called me saying he couldnt get on ... he uses aol, im guessing its blocking those as well?

TMM-TT · #**109** 06-28-2006, 01:26 PM

Quote:

Originally Posted by titter

haha another mod on my car site called me saying he couldnt get on ... he uses aol, im guessing its blocking those as well?

Only if it's registered in some of the RBLs listed.

It also depends on how the monitor is configured. I used to have more hosts in the list before but since some of the rbls fight e-mail spam and therefore blocks large dynamic ip ranges, I had to remove some of them. If the "Block everything" is set to yes, the monitor will also block everything, not matter how it's registered and that may in some cases include dynamic hosts. That's why block everything is set to no as default.

The phrase added in the product gives an address to www.tornevall.net/cgi-bin/ip.cgi where you can check which engine the ip is detected as blacklisted.

Edit:

This post made me look so inclusions/exclusions really worked properly. It didn't - the conversion from the old "plugin-configuration" made me forget a few things in the new versions. So there's a new update, again.

// 2006-06-28 (2.0.6/Another fix)
//
// * Proxyinclusions/exclusions didn't work properly

GNDI · #**110** 07-07-2006, 06:27 AM

Thanks the best usefull script I have seen for a long period of time.

Many other scripts are good to, but they are mostly "fun"

iTaLiAnBoY165 · #**111** 08-13-2006, 01:29 AM

Hi i really need help fixing this error i get this in my email how do i fix

Database error in vBulletin 3.6.0:

Invalid SQL:
INSERT INTO proxycache (ip, listed, dateline) VALUES ('218.11.207.244', 1, 1155435828);

MySQL Error : Duplicate entry '218.11.207.244' for key 1 Error Number : 1062
Date : Saturday, August 12th 2006 @ 10:23:31 PM
Script : http:///forums/infraction.php?do=report&p=14975

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.05958 seconds Memory Usage 2,330KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_php (6)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!