The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
|
#21
10-12-2012, 02:01 AM
|
|||
|
|||
Use Mailqueue System was set to Yes. It looks like bounce backs are comeing in about 1 second after the mail is sent based on the mailer daemon info and the header. It does seem like I'm flooded with bounce backs for a short time, and then there's a gap before the next batch burries my email. I'm still a little unclear on how this function works but it sounds like if I set it to "no" then emails would just go out instantly rather than in some sort of batched delay.
I ticked off "Enable Email features?" and bounce-backs stopped dead. I guess I'll need to wait and see if that's a real indicator or related to the Mailqueue System. I already disabled in the usergroups Email to a Friend and Email to Members but I like and want the other features so don't look forward to having to rewrite this stuff. Report Bad Post 'Contact Us' Link Email a Member Email this Page to a Friend New Post Notifications to Members 
|
|
#22
10-12-2012, 02:06 AM
|
||||
|
||||
|
DO you have vbseo? if so is it up to date?
|
|
#23
10-12-2012, 03:35 AM
|
|||
|
|||
|
No VBSEO not installed.
I'm VERY curious to see if the bounce-backs are stopped by ticking off that "Enable Email features?". I think I'm at an impass and can only "wait and see" now.
|
|
#24
10-12-2012, 04:01 AM
|
||||
|
||||
|
Sneeky little bugger's them hackers.. most of mine where from china some from korea and a few from the US, and they don't have to be on your site to do it not even as a guest.
If you have access to the server look for brute force attack logs too..
|
|
#25
10-12-2012, 01:01 PM
|
|||
|
|||
|
ohoooo ?
|
|
#26
10-12-2012, 03:00 PM
|
||||
|
||||
|
Quote:
|
|
#27
10-14-2012, 01:22 AM
|
|||
|
|||
|
My understanding was that registration emails would still be sent and that there is a potential that the email being sent could be impostering vbulletin based mail.
It does look like the bounce backs have completely stopped so question 1 is if Email to Friend and Email Members is individually disabled in all usergroups can I trust that those functions are truly disabled? The next question is if any one has found specific holes in the other email functions that I should look at.
|
|
#28
10-14-2012, 08:21 PM
|
||||
|
||||
|
You should also consider blocking the stupid-long script at the server level. For Linux, use mod_security, and for Windows use URLScan 3. Some of those injections use common query strings that serve no legitimate purpose.
The "email to friend" function is really nothing more than an open proxy in my opinion, and I'd leave it turned off. Or at best, only enable it for users that have been members longer than "X" amount of days (as in months). That last one would probably require some if/then/else comments custom added into some files, or as a custom plugin. I use things like that to limit access to certain site features. You could even leverage htaccess/web.config or in-file PHP to block certain /8 or /16 IP ranges, to prevent use of that file. One one of my sites, we've start to block the register.php page from China subnets, because something like 0.01% was legitimate. (An alternative contact form is available for those wrongly blocked, which allows manual account creation.) @WEBDosser : "and a few from the US" ... and those were likely Chinese users from USA based VPS used as cheap VPN/proxy. Certain hosting subnets should also be blocked. You just have to be diligent about checking server logs, and spotting trends -- and then blocking the bad incoming traffic routes. You can also limit mail at the mail server itself. cPanel has nice plugins from Config Server, to help with this. And then you can configure the mail server. If you're on shared hosting -- and therefore have no real server access -- then this would be a good reason/excuse to migrate to a VPS. You simply need more control to block things as you see fit. Best of luck to you. 
|
|
#30
10-21-2012, 12:28 PM
|
||||
|
||||
|
Quote:
Stupid long scripts. You may need a server admin. Good security is difficult to DIY, especially if you're not skilled in that area.
|
 |
«
Previous Thread
|
Next Thread
»
Linear Mode
|
|
All times are GMT. The time now is 11:12 AM.