Add-On Releases - DnP Firewall : SEO Friendly Double-Protection Layers against Flood / DoS / Spam Bots

DnP Firewall Gateway Demo

*To test Front-End Layer protection : It's the page shows up when you first enter the site.
*To test 2nd Layer Protection : Pass Front-End Layer protection, then Tap (not hold) F5 continuously nonstop for 10 seconds.

DnP Firewall Gateway was designed to stand against the massive DoS attack targeted DnP Network? few years ago. Upon installed, it has been reducing the severe level of many incidents and preventing my forum from being overload ever since. It also nearly blocks away all the automated bots that come to register for spamming on the forum. The last release was almost 3 years ago and there had never been any update to the MOD. Version 0.3 came with many issues though it was very stable. I decide to give another upgrade and simplify the code a little for another release. Don't hesitate to install DnP Firewall Gateway for your forum and hope you will find it as useful as I do.

*This Firewall is compatible with All PHP Forum systems and Search Engines Friendly*

1 - Use this simple Firewall to protect your ( vBulletin / phpBB / SMF / IPB / etc.. ) forum

1. Deny unwanted Bots
2. Reduce Spamming
3. Block Flooding Attack
4. Partially weaken DoS
5. Prevent automated malicious scripts pass through

2 - Side features

1. Increase your Adsense Impression and Revenue.
2. Act as an Introduction page for your forum.
3. SEO Friendly. (DnP Network has this firewall installed for more than 2 years. Google Search : silveryhat returns 29,000+ results)
4. No query executed / Extremely fast

3 - Installation for vBulletin Forum

a. Upload all files from package to your forum_root
b. Open global.php using Notepad. (Why global.php ? Because global.php is the core file of vBulletin system , it is also the initial startup file that calls important database queries and keeps sensitive information. The Firewall comes before any of the processes run to prevent direct damage to the forum. That is the reason why DnP Firewall does not use any hook or come as an automatic plugin like other MOD)

Find

PHP Code:

// identify where we are
define('VB_AREA', 'Forum'); 


Add BEFORE

PHP Code:

if(file_exists('dnp_fw.php')){require_once('dnp_fw.php');} 


Simply remove this line to deactivate the firewall

c. Save and Reupload global.php to your server. Done!

3b - Upgrade
Simply perform step

a.Upload all files from package to your forum_root

*If you have custom layout, do not overwrite dnp_fw_template.php*

4 - Note

Eventhough the DnP Firewall Gateway could reduce the damage of a flooding attack, it does not guarantee that all of the negative affects of an attack could be avoided. I do not hold any responsibility for such matters. As an administrator you should know that there is not software firewall that could be as effective as a hardware firewall.

You are free and encouraged to modify the Layout of the Gateway page in dnp_fw_template.php but please respect the copyrights notice of the author. Additional templates are also available if you'd want different look. (How to change DnP Firewall Template)

Free layouts for DnP Firewall Gateway at Firewall Templates

DnP Firewall Gateway also acts as an Introduction page for your forum if you fill it up with rich information content of your site. Adsense or other Ads could be placed here to maximize your revenue since every visitor will need to pass by this Introduction page. It almost 100% guarantees that your CTR or Page Impression will raise quickly.

5 - Compability

This MOD can be used with almost any system that runs PHP. Compatible with all vBulletin forum from 3.0.x to 3.8.x

It should not conflict with any existing MODs on your forum.

DnP Firewall Gateway consumes very little server resource because on the surface, it is just a simpe webpage. It does not execute any query, therefore your database will not be affected under any circumstances by this MOD.

DnP Firewall Gateway could together be used with InV-Firewall Script to act as doubled-firewall system that 2 x the strength against Flood /DoS Attack with bonus of denying malicious query and tracking access.

DnP Firewall Gateway is also compatible with DnP Instant! AJAX/SEO Musicbox & News smart anti-flood protection that brings extra power to the firewall. The 3 firewalls, DnP Firewall Gateway - InV-Firewall Script and Smart Anti-Flood from DnP Instant! AJAX/SEO Musicbox & News can be used altogether to triple the strength.

6 - History Log

v1.4

1. Optimize firewall structure
2. Optimize 2nd-layer protection

v1.3

1. Add 2nd layer protection
2. 3 more options for 2nd layer protection in config file

v1.2 Beta

1. Improve Firewall Stability
2. Add Domain option
3. Separate config file

7 - Useful links

1. Setup Domain List for DnP Firewall Gateway
2. How to change DnP Firewall Template
3. What are the Search Engines allowed by DnP Firewall Gateway ?
4. Branding-Free License of DnP Firewall Gateway
5. Detail information about DnP Firewall 2nd Layer Protection
6. Templates collection

[Original topic can be found at http://www.silveryhat.com/delynie/f142/dnp-firewall-help-your-forum-fight-flood-attack-dos-spam-unwated-bots-6985.html]

[|Jordan|]

When i have this mod enabled, and when i click the image to enter my site, i get the following url: dnp_fw.php?dnp_firewall_redirect='.%24_SERVER['REQUEST_URI'].'

and the page just goes back to the DnP page. What am i doing wrong? It even does it when i didnt edit any DnP files. The website server is using a Firewall though that has HTTP filters to enabled to prevent exploits.

Also, your link to "InV-Firewall Script" leads to a page in another language, can you link to a page in english?

[silveryhat]

Originally Posted by JasonGD

Back with a little update, it's been about 3 weeks since installing, and I've had absolutely no spammers! That's definitely a nice change from the 1 a day I was getting beforehand.

This thing rocks!

Originally Posted by vnairp11

excellent mod nominated thanks

Thanks for the nice feedbacks guys,

Originally Posted by |Jordan|

When i have this mod enabled, and when i click the image to enter my site, i get the following url: dnp_fw.php?dnp_firewall_redirect='.%24_SERVER['REQUEST_URI'].'

and the page just goes back to the DnP page. What am i doing wrong? It even does it when i didnt edit any DnP files. The website server is using a Firewall though that has HTTP filters to enabled to prevent exploits.

Also, your link to "InV-Firewall Script" leads to a page in another language, can you link to a page in english?

Have you tried to figure out what are being filtered by the web server firewall ? For all the time the firewall is just a type of plug and play mod, if there is something wrong it is more likely a misconfiguration for from the host side itself.

[silveryhat]

Originally Posted by |Jordan|

The firewall blocks requests with the following strings:
...

So anything in there that could be blocking this mod from working properly? Or are my firewall settings adequate enough to do the same thing this mod does?

The firewall you are using seems to block or , like you describe, convert characters. This, more likely is used to avoid malicious query being executed but on the other hand it will interrupt the process of other MODs and for DnP Firewall apparently. What firewall are you using? Is it software or hardware? Because if it only blocks certain commands, it does not protect your site against flooding, dos and spambots.

[fta2k]

Everything seems to be working fine here.

[LeHHeL]

Just a small issue, on PHP files use LONG TAG like <?php not <? , if is disabled, cannot run.

[|Jordan|]

I'd rather not say what firewall im using because it will open security issues.

What characters does DnP in the url tag?

[|Jordan|]

Well. I finally figured out what was causing my problems! And it wasnt my firewall!

I changed all the <? of the DnP php files to <?php and now it works flawlessly!

P.S. silveryhat, can you edit your post id of 104 (this post) and remove your quote about my firewall info. I'd rather not have it online anymore.

P.S.S I'm trying to download INV firewall, but cant because theres no username to access the download page (there's only a password)

[maddoghalo1]

Is there a way to make it so when ever someone leaves my website and they come back it makes them go thorugh that portal again? I have to dissconnect from my internet then reconnect to get the gateway to pop up again when I re visit the site. When I leave the site, then open browser and go back to my site, it goes to my site and the gateway part does not pop up. I want it to pop up every time someone visits my site even if they leave it for 5 seconds.

[silveryhat]

Originally Posted by |Jordan|

Well. I finally figured out what was causing my problems! And it wasnt my firewall!

I changed all the <? of the DnP php files to <?php and now it works flawlessly!

P.S. silveryhat, can you edit your post id of 104 (this post) and remove your quote about my firewall info. I'd rather not have it online anymore.

I have done so

P.S.S I'm trying to download INV firewall, but cant because theres no username to access the download page (there's only a password)

This is a firewall script written by a local Vietnamese coder. Try Shacker and Delynie for the username and password to access. Further support of INV firewall is not available here because this topic is for DnP Firewall. However, you may ask about it on the official forum, which its link is provided below.

Originally Posted by maddoghalo1

Is there a way to make it so when ever someone leaves my website and they come back it makes them go thorugh that portal again? I have to dissconnect from my internet then reconnect to get the gateway to pop up again when I re visit the site. When I leave the site, then open browser and go back to my site, it goes to my site and the gateway part does not pop up. I want it to pop up every time someone visits my site even if they leave it for 5 seconds.

The gateway is designed to appear only once in the first time user establishes a connection to the forum. This session expires after an amount of time, depends on your server setting. Since the way you require is not how the firewall should work for everyone, you might want to make a personal request on the official forum.

[need2fart]

Dear Silveryhat,

This script works good it stopped the spammers from attacking one of my pages, but I looked today and I have a few errors in my error log, can you help me fix them?

Here are the errors:

[03-Nov-2009 01:14:43] PHP Warning:  require_once(./global.php) [<a href='function.require-once'>function.require-once</a>]: failed to open stream: No such file or directory in /home/delta/public_html/showthread.php on line 104
[03-Nov-2009 01:14:43] PHP Fatal error:  require_once() [<a href='function.require'>function.require</a>]: Failed opening required './global.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/delta/public_html/showthread.php on line 104

Thanks.