ban proxy servers

[BlackDeath]

i have several users who like to cause a lot of trouble. they boast that they can't be banned because they use proxy servers. well you can ban their true IP but once u do that, they use proxy's. there is a hack that will allow u to detect the proxy server and will even tell u their true IP. could someone modify this hack to make it an option in the admin cp that you can disallow anyone using a proxy? i would be most appreciative and so would several other people i know who have the same problem. thanks!

[Logician]

This is NOT tested:

edit functions.php, find:

PHP Code:

$ipaddress=$HTTP_SERVER_VARS['REMOTE_ADDR']; 


After that add:

PHP Code:

 if (getenv("HTTP_FORWARDED")!="") {
        $proxyip=getenv("HTTP_FORWARDED");
      } elseif (getenv("HTTP_X_FORWARDED_FOR")!="") {
        $proxyip=getenv("HTTP_X_FORWARDED_FOR");
      } elseif (getenv("HTTP_CLIENT_IP")!="") {
        $proxyip=getenv("HTTP_CLIENT_IP");
      } else {
        $proxyip="";
      } 


find

PHP Code:

if (strstr(" ".$ipaddress," ".trim($val))!="") {
        eval("standarderror("".gettemplate("error_banip")."");");
      } 


After that add:

PHP Code:

if ($proxyip AND strstr(" ".$proxyip," ".trim($val))!="") {
        eval("standarderror("".gettemplate("error_banip")."");");
      } 


What it does is this: It checks if user has a proxy user and if yes it not only matchs his proxy IP but also real IP for banned IPs and if either one matches, he is banned.

However please notice that not every proxy server sends the real IP to your site so your users might have a point while saying you can not get their real IP anyway if they are using such a proxy server.

Again I didn't test the hack myself..

[BlackDeath]

this will help a lot but i would prefer if i could make it that the board banned all proxys from registered users but allowed proxys by admins (i use a proxy at work). is that possible? thanks.

[Logician]

edit global.php, find:

PHP Code:

checkipban(); 


Before that add:

PHP Code:

if (getenv("HTTP_FORWARDED")!="") {
        $proxyip=getenv("HTTP_FORWARDED");
      } elseif (getenv("HTTP_X_FORWARDED_FOR")!="") {
        $proxyip=getenv("HTTP_X_FORWARDED_FOR");
      } elseif (getenv("HTTP_CLIENT_IP")!="") {
        $proxyip=getenv("HTTP_CLIENT_IP");
      } else {
        $proxyip="";
      }
if ($proxyip AND $bbuserinfo[usergroupid]!=6) { eval("standarderror("".gettemplate("error_banip")."");");exit;} 


[BlackDeath]

i think it works. both codes work. i had someone w/ a proxy test it and it seems to show that the server is busy?? i'll post a SS of the error soon. if i want to allow mod level people or possibly create a user group that i allow proxys, how would that look? i think if someone could make this nice and clean to go along w/ the existing proxy hack, and make it an option in the admin cp, a lot of people who get trouble makers on their forums will be very happy!! thanks.

[BlackDeath]

here is the error.

[Logician]

nope it's suppose to display "error_banip" template, this error does not seem related

[Scott MacVicar]

It would affect alot of users including NTL and freeserve which are quite big in the UK who use transparent proxies and then add HTTP_CLIENT_IP to pass the real IP.

[BlackDeath]

Originally posted by PPN
It would affect alot of users including NTL and freeserve which are quite big in the UK who use transparent proxies and then add HTTP_CLIENT_IP to pass the real IP.

its been working for most, no one has gotten that error however there have been a few people who have been banned who say they aren't on proxys, why would that be?

[Chris M]

@BlackDeath - I know you may have trouble with Proxies, but people like myself, are forced to use a Proxy to access the internet...

Our home network will only issue an Internet connection if you have the Proxy settings setup...

You should consider all sides before totally banning

Satan