Add-On Releases - DnP Firewall : SEO Friendly Double-Protection Layers against Flood / DoS / Spam Bots

DnP Firewall Gateway Demo

*To test Front-End Layer protection : It's the page shows up when you first enter the site.
*To test 2nd Layer Protection : Pass Front-End Layer protection, then Tap (not hold) F5 continuously nonstop for 10 seconds.

DnP Firewall Gateway was designed to stand against the massive DoS attack targeted DnP Network? few years ago. Upon installed, it has been reducing the severe level of many incidents and preventing my forum from being overload ever since. It also nearly blocks away all the automated bots that come to register for spamming on the forum. The last release was almost 3 years ago and there had never been any update to the MOD. Version 0.3 came with many issues though it was very stable. I decide to give another upgrade and simplify the code a little for another release. Don't hesitate to install DnP Firewall Gateway for your forum and hope you will find it as useful as I do.

*This Firewall is compatible with All PHP Forum systems and Search Engines Friendly*

1 - Use this simple Firewall to protect your ( vBulletin / phpBB / SMF / IPB / etc.. ) forum

1. Deny unwanted Bots
2. Reduce Spamming
3. Block Flooding Attack
4. Partially weaken DoS
5. Prevent automated malicious scripts pass through

2 - Side features

1. Increase your Adsense Impression and Revenue.
2. Act as an Introduction page for your forum.
3. SEO Friendly. (DnP Network has this firewall installed for more than 2 years. Google Search : silveryhat returns 29,000+ results)
4. No query executed / Extremely fast

3 - Installation for vBulletin Forum

a. Upload all files from package to your forum_root
b. Open global.php using Notepad. (Why global.php ? Because global.php is the core file of vBulletin system , it is also the initial startup file that calls important database queries and keeps sensitive information. The Firewall comes before any of the processes run to prevent direct damage to the forum. That is the reason why DnP Firewall does not use any hook or come as an automatic plugin like other MOD)

Find

PHP Code:

// identify where we are
define('VB_AREA', 'Forum'); 


Add BEFORE

PHP Code:

if(file_exists('dnp_fw.php')){require_once('dnp_fw.php');} 


Simply remove this line to deactivate the firewall

c. Save and Reupload global.php to your server. Done!

3b - Upgrade
Simply perform step

a.Upload all files from package to your forum_root

*If you have custom layout, do not overwrite dnp_fw_template.php*

4 - Note

Eventhough the DnP Firewall Gateway could reduce the damage of a flooding attack, it does not guarantee that all of the negative affects of an attack could be avoided. I do not hold any responsibility for such matters. As an administrator you should know that there is not software firewall that could be as effective as a hardware firewall.

You are free and encouraged to modify the Layout of the Gateway page in dnp_fw_template.php but please respect the copyrights notice of the author. Additional templates are also available if you'd want different look. (How to change DnP Firewall Template)

Free layouts for DnP Firewall Gateway at Firewall Templates

DnP Firewall Gateway also acts as an Introduction page for your forum if you fill it up with rich information content of your site. Adsense or other Ads could be placed here to maximize your revenue since every visitor will need to pass by this Introduction page. It almost 100% guarantees that your CTR or Page Impression will raise quickly.

5 - Compability

This MOD can be used with almost any system that runs PHP. Compatible with all vBulletin forum from 3.0.x to 3.8.x

It should not conflict with any existing MODs on your forum.

DnP Firewall Gateway consumes very little server resource because on the surface, it is just a simpe webpage. It does not execute any query, therefore your database will not be affected under any circumstances by this MOD.

DnP Firewall Gateway could together be used with InV-Firewall Script to act as doubled-firewall system that 2 x the strength against Flood /DoS Attack with bonus of denying malicious query and tracking access.

DnP Firewall Gateway is also compatible with DnP Instant! AJAX/SEO Musicbox & News smart anti-flood protection that brings extra power to the firewall. The 3 firewalls, DnP Firewall Gateway - InV-Firewall Script and Smart Anti-Flood from DnP Instant! AJAX/SEO Musicbox & News can be used altogether to triple the strength.

6 - History Log

v1.4

1. Optimize firewall structure
2. Optimize 2nd-layer protection

v1.3

1. Add 2nd layer protection
2. 3 more options for 2nd layer protection in config file

v1.2 Beta

1. Improve Firewall Stability
2. Add Domain option
3. Separate config file

7 - Useful links

1. Setup Domain List for DnP Firewall Gateway
2. How to change DnP Firewall Template
3. What are the Search Engines allowed by DnP Firewall Gateway ?
4. Branding-Free License of DnP Firewall Gateway
5. Detail information about DnP Firewall 2nd Layer Protection
6. Templates collection

[Original topic can be found at http://www.silveryhat.com/delynie/f142/dnp-firewall-help-your-forum-fight-flood-attack-dos-spam-unwated-bots-6985.html]

[bleros]

yup thanks if work i tested it The site made doss

[TheLastSuperman]

Originally Posted by silveryhat

Could you name some of those ? Besides, you can check this topic for detail information What are the Search Engines / Bots allowed by DnP Firewall Gateway ?



it would be good too and thank you very much. There is not only install instruction needed but also the other advanced configures, I'm trying to get all of them written down.



Yup. It'd be your forum domain. You can add more than just two if you have more than 1 domain set. This Setup Domain List for DnP Firewall Gateway , may also help you on the way.

All I have to do is mow the yard (woohoo lol) since it's cool outside and after that the install video. Get that info to me and I'll make another one for the advanced features, if it's anything server dependant please be aware my host might not be setup exactly the same to provide what others could already have in place so that might hinder showing the results etc but we'll see what the advanced options are and do the best we can. Can you host the video or is bandwidth a problem? Let me know... ok BRB (Big Back Yard with a push mower so most likely 2-3 hours).

S-MAN

[R-D]

Shouldn't that $_GET variable be sanitized or at least checked that it is for the same site? Not sure if it can be abused as an open redirect but it's better to be safe than sorry.

Also, $HTTP_SERVER_VARS is deprecated ($HTTP_SERVER_VARS['HTTP_USER_AGENT']). You should use $_SERVER. :up:

[silveryhat]

Originally Posted by TheLastSuperman

All I have to do is mow the yard (woohoo lol) since it's cool outside and after that the install video. Get that info to me and I'll make another one for the advanced features, if it's anything server dependant please be aware my host might not be setup exactly the same to provide what others could already have in place so that might hinder showing the results etc but we'll see what the advanced options are and do the best we can. Can you host the video or is bandwidth a problem? Let me know... ok BRB (Big Back Yard with a push mower so most likely 2-3 hours).

S-MAN

yes i can host the file just fine. Take all the time that you need and don't worry about advanced options. It's better to have a clean, basic setup instruction

Originally Posted by R-D

Shouldn't that $_GET variable be sanitized or at least checked that it is for the same site? Not sure if it can be abused as an open redirect but it's better to be safe than sorry.

Also, $HTTP_SERVER_VARS is deprecated ($HTTP_SERVER_VARS['HTTP_USER_AGENT']). You should use $_SERVER. :up:

though $_GET is sent, if you check carefully it is not used anywhere. And the domain check is already available since we have Setup Domain List for DnP Firewall Gateway . I know $HTTP_SERVER_VARS is old...but believe it or not I ran into some incompatibility issue of using $_SERVER. So I have to keep it safe. I might provide information related to the change to $_SERVER, but I would not directly do that on the code just to avoid problems.

In version 1.3 there will be one more layer of protection besides the firewall itself

[silveryhat]

Update v1.3 on Aug 29 / 2009

Add 2nd layer protection and 3 more options in config file.

Detail information about DnP Firewall 2nd Layer Protection

[digicom]

Thanks For Update To 1.3, Installed And Working With No Problems :up:

[Brandon Sheley]

interesting mod, I've tagged it

[bleros]

Installed and Nominated

Thanks for update

[nomoreturn]

Installed working great

[bleros]

silveryhat any idea without Enter page :S