The Arcive of Official vBulletin Modifications Site.

About Developer · **Released**: 08-24-2009

DnP Firewall Gateway Demo

*To test Front-End Layer protection : It's the page shows up when you first enter the site.
*To test 2nd Layer Protection : Pass Front-End Layer protection, then Tap (not hold) F5 continuously nonstop for 10 seconds.

DnP Firewall Gateway was designed to stand against the massive DoS attack targeted DnP Network? few years ago. Upon installed, it has been reducing the severe level of many incidents and preventing my forum from being overload ever since. It also nearly blocks away all the automated bots that come to register for spamming on the forum. The last release was almost 3 years ago and there had never been any update to the MOD. Version 0.3 came with many issues though it was very stable. I decide to give another upgrade and simplify the code a little for another release. Don't hesitate to install DnP Firewall Gateway for your forum and hope you will find it as useful as I do.

*This Firewall is compatible with All PHP Forum systems and Search Engines Friendly*

1 - Use this simple Firewall to protect your ( vBulletin / phpBB / SMF / IPB / etc.. ) forum

Deny unwanted Bots
Reduce Spamming
Block Flooding Attack
Partially weaken DoS
Prevent automated malicious scripts pass through

2 - Side features

Increase your Adsense Impression and Revenue.
Act as an Introduction page for your forum.
SEO Friendly. (DnP Network has this firewall installed for more than 2 years. Google Search : silveryhat returns 29,000+ results)
No query executed / Extremely fast

3 - Installation for vBulletin Forum

a. Upload all files from package to your forum_root
b. Open global.php using Notepad. (Why global.php ? Because global.php is the core file of vBulletin system , it is also the initial startup file that calls important database queries and keeps sensitive information. The Firewall comes before any of the processes run to prevent direct damage to the forum. That is the reason why DnP Firewall does not use any hook or come as an automatic plugin like other MOD)

Find

PHP Code:


			
// identify where we are
define('VB_AREA', 'Forum');

Add BEFORE

PHP Code:


			
if(file_exists('dnp_fw.php')){require_once('dnp_fw.php');}

Simply remove this line to deactivate the firewall

c. Save and Reupload global.php to your server. Done!

3b - Upgrade
Simply perform step

Quote:

a.Upload all files from package to your forum_root

*If you have custom layout, do not overwrite dnp_fw_template.php*

4 - Note

Eventhough the DnP Firewall Gateway could reduce the damage of a flooding attack, it does not guarantee that all of the negative affects of an attack could be avoided. I do not hold any responsibility for such matters. As an administrator you should know that there is not software firewall that could be as effective as a hardware firewall.

You are free and encouraged to modify the Layout of the Gateway page in dnp_fw_template.php but please respect the copyrights notice of the author. Additional templates are also available if you'd want different look. (How to change DnP Firewall Template)

Free layouts for DnP Firewall Gateway at Firewall Templates

DnP Firewall Gateway also acts as an Introduction page for your forum if you fill it up with rich information content of your site. Adsense or other Ads could be placed here to maximize your revenue since every visitor will need to pass by this Introduction page. It almost 100% guarantees that your CTR or Page Impression will raise quickly.

5 - Compability

This MOD can be used with almost any system that runs PHP. Compatible with all vBulletin forum from 3.0.x to 3.8.x

It should not conflict with any existing MODs on your forum.

DnP Firewall Gateway consumes very little server resource because on the surface, it is just a simpe webpage. It does not execute any query, therefore your database will not be affected under any circumstances by this MOD.

DnP Firewall Gateway could together be used with InV-Firewall Script to act as doubled-firewall system that 2 x the strength against Flood /DoS Attack with bonus of denying malicious query and tracking access.

DnP Firewall Gateway is also compatible with DnP Instant! AJAX/SEO Musicbox & News smart anti-flood protection that brings extra power to the firewall. The 3 firewalls, DnP Firewall Gateway - InV-Firewall Script and Smart Anti-Flood from DnP Instant! AJAX/SEO Musicbox & News can be used altogether to triple the strength.

6 - History Log

v1.4
Optimize firewall structure

Optimize 2nd-layer protection

v1.3
Add 2nd layer protection

3 more options for 2nd layer protection in config file

v1.2 Beta
Improve Firewall Stability

Add Domain option

Separate config file

7 - Useful links

[Original topic can be found at http://www.silveryhat.com/delynie/f142/dnp-firewall-help-your-forum-fight-flood-attack-dos-spam-unwated-bots-6985.html]

silveryhat · #32 08-30-2009, 05:07 AM

Quote:

Originally Posted by nomoreturn@hotm

Installed working great

Quote:

Originally Posted by digicom

Thanks For Update To 1.3, Installed And Working With No Problems :up:

Please report if any problem occurs

Quote:

Originally Posted by bleros

silveryhat any idea without Enter page :S

Is there any message ? Any error ? or screenshot ..

digicom · #33 08-30-2009, 08:35 AM

1 problem im a having is the that message

Multiple Requests have been directly targeted our forum, as the result the current access is temporarily restricted for 10 second(s)

Is being displayed in shoutbox and in Top 5 Stats aswell on forum and I have had to dissable 2nd Layer Flood Protection to stop this happening.

Is there anyway to stop this? Regards

AdrianH · #34 08-30-2009, 01:03 PM

Quote:

Originally Posted by digicom

1 problem im a having is the that message

Multiple Requests have been directly targeted our forum, as the result the current access is temporarily restricted for 10 second(s)

Is being displayed in shoutbox and in Top 5 Stats aswell on forum and I have had to dissable 2nd Layer Flood Protection to stop this happening.

Is there anyway to stop this? Regards

This second layer is useless on a forum with a shoutbox or a java tabbed content box.

Every refresh trips the firewall and messages appear all over the forum,after @ 2 minutes the screen disolved into a mess of broken images.........

AdrianH · #35 08-30-2009, 01:26 PM

Uninstalled as it is interfering with ping backs and monitoring provided by my host.

silveryhat · #36 08-30-2009, 02:45 PM

Quote:

Originally Posted by CareyCrew

This second layer is useless on a forum with a shoutbox or a java tabbed content box.

Every refresh trips the firewall and messages appear all over the forum,after @ 2 minutes the screen disolved into a mess of broken images.........

Quote:

Originally Posted by digicom

1 problem im a having is the that message

Multiple Requests have been directly targeted our forum, as the result the current access is temporarily restricted for 10 second(s)

Is being displayed in shoutbox and in Top 5 Stats aswell on forum and I have had to dissable 2nd Layer Flood Protection to stop this happening.

Is there anyway to stop this? Regards

You guys forgot to change the 2ng layer config to have it adapted to your forum

. On some board the default configuration should be fine while on some other board with active AJAX shoutbox a little change might be necessary. Open config file and set

PHP Code:


			
$config['dnp_firewall_penalty_allow'] = 12;

Detail information about DnP Firewall 2nd Layer Protection

digicom · #37 08-30-2009, 02:45 PM

I Have Installed Cyb Advanced 'New Posts' (AJAX),Cyb Advanced Forum Statistics, Cyb - ChatBox,And It Seems That Because There Auto Refreshing That Its Causing Firewall To Trigger The Message

Quote:

Multiple Requests have been directly targeted our forum, as the result the current access is temporarily restricted for 10 second(s)

digicom · #38 08-30-2009, 02:47 PM

i have already tryed setting this to a few diffrent setting atm it is set at

PHP Code:


			
//Amount of time in second to show restrict message if a Flooding attack is determined
$config['dnp_firewall_wait_time'] = 10 ;

PHP Code:


			
//Amount of penalty to be considered a Flooding attack. 
//Every time multiple requests sent to the forum in less than few a second, penalty count increased by 1.
$config['dnp_firewall_penalty_allow'] = 20;

Quote:

Originally Posted by silveryhat

You guys forgot to change the 2ng layer config to have it adapted to your forum

. On some board the default configuration should be fine while on some other board with active AJAX shoutbox a little change might be necessary. Open config file and set

PHP Code:


			
$config['dnp_firewall_penalty_allow'] = 12;

Detail information about DnP Firewall 2nd Layer Protection

silveryhat · #39 08-30-2009, 03:02 PM

I pull this information from the Detail information about DnP Firewall 2nd Layer Protection for you. Though it is titled as Advanced, it is not very hard to do

Quote:

Advanced
The 2nd Layer protection also sports one hidden setting that is not shown in config file. This setting is for how long it should take before clear out the penalty count.

Open dnp_fw.php and find

PHP Code:


			
        if((time() - $_SESSION['dnp_firewall_last_request_timestamp']) > 10 ){

Change 10 to a different amount of time client does not send any request (in seconds) then 2nd layer should reset the penalty count to 0.

Example : 3 or 4 seconds would be fine.

PHP Code:


			
        if((time() - $_SESSION['dnp_firewall_last_request_timestamp']) > 4 ){

In your case any value from 2-5 would work, also depends on how fast other ajax mods refresh themselves :erm:

digicom · #40 08-30-2009, 03:23 PM

Thanks just edited dnp_fw.php amd changed setting,
Ill see if that sorts it Apprciated :up:

silveryhat · #41 08-30-2009, 03:27 PM

Anytime. As you see, the 2nd Layer protection is a bit powerful and sensitive.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.06040 seconds Memory Usage 2,386KB Queries Executed 26 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (8)bbcode_php (10)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (4)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)pagenav_pagelinkrel (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (5)postbit_attachment (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_attachment postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!