The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
Check Proxy RBL on New User Registration. Details »» | |||||||||||||||||||||||||||
Check Proxy RBL on New User Registration.
Developer Last Online: Jul 2014
Check Proxy RBL on New User Registration Version 4.1
Version 4.1 includes remains unchanged from version 4.0 with the exception of a code fix to deal with an SQL injection security hole in the code. What does this hack do? Hooking in at register_addmember_process and register_addmember_complete this hack compares the IP address of the person registering with the Realtime Block List(s) of your choice. Based on your configuration the RBL Checker will then perform one of these actions:
These options are configurable in AdminCP > Options > DM-RBL Check on Registration. Why Block Proxies? Banned and Spammers users often get around IP bans by simply using an open proxy - of which there are thousands - to get around the IP ban. Very few legitimate users slow their surfing by using an anonymous proxy. How do you Install?
What is the default config? By default the RBLChecker will check the IP of a new registration, allow registration to complete, but add the new user to the "COPPA Members Awaiting Moderation" usergroup. You can then approve/reject those members depending on whether you think they are/aren't spammers/trolls. You can modify the settings in the AdminCP to Ban or Block as you like. Hack History: Version 4.1 - Fixed SQL Injection security hole. - Fixed some minor typos in automatically generated messages. Version 4.0 - Added ability to specify error reported on blocks. - Added ability to specify ban reason and custom title. - Added ability to move users to "pending moderation" group if registration is allowed. - Updated list of RBLs checked based on testing with lists of "anonymous" proxies. - Fixed IP address of Notification Posts equalling IP of blocked user. (Now Notification IP = 1.2.3.4) Version 3.2 - Fixed typo causing blocked registrations to be reported as allowed. Version 3.1 - change in variable name in v3.0 broke RBL checking. Corrected error. - match notification now includes the name of the RBL that matches the IP. Version 3.0 - plugin now fires at "register_addmember_process" allowing the user to completely fill in the form. - Added the ability to specify more than one RBL. - Added option to specify whether registration is blocked or allowed to complete. - Added option to automatically ban registrations that are allowed to complete but have a positive IP match. - Added option to specify user who is "notifier". - Added option to specify a forum where a notification thread will be created. - Added option to supress notification PM / Thread when an IP matches blacklist or known proxy list. - Added customized error codes for notifications - notification now indicates whether a registration IP has matched the RBL, blacklist, or predefined list of anonymizers. - Reworded Phrases. - Removed 10.x.x.x IP from known proxy/anonymizer list. version 2.0 - Added configuration options under vboptions > DM-RBL Check on Registration. - Added PM on Block. - Added option to select RBL. - Added Custom Whitelist. - Added Custom Blacklist. - Added list of free proxies. - Changed default RBL to sbl-xbl.spamhaus.org - Added option to enable/disable checking. version 1.0 - added plugin to check against opm.tornevall.org - added custom phrase to be reported as error on registration start. Using this Hack? If you install this hack please click "Installed" to receive updates. If you find this hack useful you can always hit that paypal button too... Supporters / CoAuthors Show Your Support
|
Comments |
#72
|
|||
|
|||
Quote:
Also, ircbl.ahbl.org (http://www.ahbl.org/docs/ircbl.php) might work. Here's how AHBL describes it: Quote:
|
#73
|
|||
|
|||
yeah im going to try out opm.tornevall.org and see how it works out. yeah Anonymouse.org had me puzzled cause it gets right by everything. But ill be looking around today to see what I can come up with. as for ircbl.ahbl.org im going to look more info up on that one now also.
|
#74
|
||||
|
||||
I obviously do not wish to block out legit people, but as of the last few days we have had more than our usual registrations and most from third world countries.
These people would register than make a post pointing to either a trojan or some advertisement or both. We never had these issues till recent and as of right now most people who were refused registration from the RBL checker program were listed as big time spammers. |
#75
|
|||
|
|||
Quote:
What were the IPs of the people who posted the ads/trojans? What were the IPs of the spammers? What BL's are you using? My point in my earlier post was that people should be aware of what they are getting into when using the blacklists like they are. |
#76
|
||||
|
||||
I have been inundated recently with guest registering on our forum and the only purpose is to place spam on our board. I personally used spamhaus.org in the checker. But have reviewed the ips through dnsstuff.com and all the ip that were caught were listed as spammers and not small time either. I had one guy trying to register with a bogus email. One person registered and placed a link to trojan file which my antivirius flaged immediately and prompted me to remove the link from the board. Obviously I can not post IPs here but I will say that the person was comming out of Germany.
I will not just refuse people but to date the ones who have been caught are known spammers and I do check to make sure. |
#77
|
|||
|
|||
Forum post made by this mod says "This registration attempt has been allowed." even when it is set to not allow the registration.
I think you missed an "s": if ($DM_rblcheck_allowreg == "0") { should be: if ($DM_rblcheck_allowregs == "0") { |
#78
|
|||
|
|||
dang... you're right. Will upload a new file.
|
#79
|
||||
|
||||
I'm not really sure this mod is working or not...but...
There is one thing I would like to see. A way to add a warning on the registration page that users using a proxy will not be allowed to finish registration. Thanks! Brew |
#80
|
||||
|
||||
Thanks for the update on this, I was being overun with spamers and this hack caught about 95% of the problems before registration.
|
#81
|
|||
|
|||
I seem to be getting about 5 new threads created on each RBL match. I can't tell if the person registering is somehow looping through the registration process multiple times (like maybe they didn't enter all the required information and had to re-enter the form) or if it's a bug. They really shouldn't keep registering since I have it set to allow the registration attempt on RBL match. Since the timestamp of the posts often span a few minutes time, I suspect it is not a bug with this product.
Anyone else seeing this? |
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|