Previous Thread
Next Thread
Print Thread
Rate Thread
#274904 06/12/2004 11:48 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
I'm having some problems with banned IP's.

I would like to ban 82.%.%.% and it does not work. User can STILL post as anonymous and EVEN post a registration request.

So I tried to ban exact IP 82.192.56.129 and user can STILL post as anonymous and post registration request?

I didn't change any of ban/unban functions or checking.


Why doesn't % marker work? Also I tried 82.% just in case


Kind regards,
PaNTerSan
Sponsored Links
Brandon Long #274905 06/13/2004 11:34 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
OK - just add
Code
<br />// ------------------<br />// Check for any bans<br />   $userob = new user;<br />   $userob->check_ban("",$Cat); <br />

before
Code
<br />// -------------------------------------------<br />// Make sure we have a minlength and maxlength<br />


Kind regards,
PaNTerSan
Brandon Long #274906 06/14/2004 1:34 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]PaNTerSan said:
I would like to ban 82.%.%.% and it does not work. User can STILL post as anonymous and EVEN post a registration request.
[/]
% marker does not work because it is no implemented []http://www.drogart.org/ubbthreads/images/graemlins/rolleyes.gif[/]

Here is what you have to do in ubbt.inc.php in check_ban functon:
Find
Code
<br />        if ($Uid) {<br />            $extra = "B_Uid='$Uid' OR ";<br />        } <br />        <br />        $query = "<br />          SELECT B_Hostname,B_Uid,B_Reason,B_X_Forum<br />          FROM   {$config['tbprefix']}Banned<br />          WHERE  $extra B_Hostname LIKE '$Hostname_q'<br />       ";<br />

Replace with:
Code
<br />        if ($Uid) {<br />            $extra = "B_Uid='$Uid' OR ";<br />        } else {<br />            // hostname is banned - let's check for % to match multiple digits (pantersan fix)<br />            $IPpieces   = explode(".", $Hostname);<br />            $ipMatch    = "";<br />            $extra2     = "";<br />            for ($i=0; $i < count($IPpieces)-1; $i++){<br />                $ipMatch .= $IPpieces[$i];<br />                $extra2  .= " OR B_Hostname='$ipMatch.%'";<br />                $ipMatch .= ".";<br />            }<br />        }<br />        <br />        $query = "<br />          SELECT B_Hostname,B_Uid,B_Reason,B_X_Forum<br />          FROM   {$config['tbprefix']}Banned<br />          WHERE  $extra B_Hostname LIKE '$Hostname_q' $extra2<br />       ";<br />



Kind regards,
PaNTerSan
Brandon Long #274907 06/14/2004 2:23 AM
Joined: Aug 2000
Posts: 1,290
Addict
Addict
Offline
Joined: Aug 2000
Posts: 1,290
Be careful blocking IP's you may shut out a hole bunch of potential members that have an ISP using the same opening string..;) That said, you can block them using an htaccess file. They won't even see your site.


- Custom Web Development
http://www.JCSWebDev.com
chrisX #274908 06/14/2004 4:12 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]J.C. said:
Be careful blocking IP's you may shut out a hole bunch of potential members that have an ISP using the same opening string..;) That said, you can block them using an htaccess file. They won't even see your site. [/]
We know that and we don't really care

If you get flooded from same networt you should ban the whole network no matter what other users have to say - And if this is "old user" we post a message and then users can solve this between them. Otherwise we say: [censored] happens - NO, [censored] takes time & effort


Kind regards,
PaNTerSan
Sponsored Links
Brandon Long #274909 06/14/2004 6:31 AM
Joined: Feb 2002
Posts: 2,286
Veteran
Veteran
Joined: Feb 2002
Posts: 2,286
Don't forget these days it is very easy to spoof an IP address - so evern if you banned them, they would probably find a way around the IP ban if they wanted to.


Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....)
Gorlum #274910 06/14/2004 6:42 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
True - but users on my board don't know the meaning of word spoof

And If it gets this ugly we would report this to our ISP. Actually in the future we intend to report any kind of making strange repeating requests to server.


Kind regards,
PaNTerSan
Brandon Long #274911 06/14/2004 4:23 PM
Joined: Aug 2000
Posts: 1,290
Addict
Addict
Offline
Joined: Aug 2000
Posts: 1,290
If someone wants to be on your site they will be. The only fool proof way to stop them is to close the board. Cable modem users can shut their modem off for about 24 hours and get a new ip number. Have your members pay $25.00 to join, if they are good for a year, they get it back. If they act up x amount of times, they forfeit it.


- Custom Web Development
http://www.JCSWebDev.com
chrisX #274912 06/15/2004 1:43 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]J.C. said:
If someone wants to be on your site they will be.[/]
We know that

[]J.C. said:
The only fool proof way to stop them is to close the board. Cable modem users can shut their modem off for about 24 hours and get a new ip number.[/]
Actually cable users are not a real threat - DSL modems get new IP whenever they want
AND if someone really bother your server - do the network ban for board and via .htaccess.

[]J.C. said:
Have your members pay $25.00 to join, if they are good for a year, they get it back. If they act up x amount of times, they forfeit it. [/]
Now, this would be nice []http://www.drogart.org/ubbthreads/images/graemlins/odvaljot.gif[/] We are serving our users for free. Average age of our users is 16-22. Majority of these users are "kids" who just ran away from their parents and THINK they know everything.

Let me explain: we are a drug harm reduction organization and our users are in 99% percent somekind of drug (ab)users. They tend to go to "parties" (e.g. rave culture) during weekend etc.
Most of them have big problems with authorita of any kind. And most of them have problems because of parents: inadequate upbringing, physical and psychic abuse etc etc.
WE are understood to be their "second home". And they take it seriously to.
Since they couldn't evolve their REAL personalities in "normal" way for our community they are evolving their Digi-Selfs which is much easier since there is no visual contact necessary. Of course they "know each other" and "hang out" together but that is due to Digi-Self and not My-Self: lack of trust, lying, exaggeration, fears, paranoia are major reasons for "breaking up a friendship/partnership"...

This will become a really big problem with next generation...

So now and then we have a problem because they try NOT to follow the guidelines and rulez. And when they get banned they THINK it was unjustified so they want to "make a mess", "revenge",... you know

This users are my "threat"


Kind regards,
PaNTerSan
chrisX #274913 06/15/2004 4:54 AM
Joined: Sep 2003
Posts: 488
Code Monkey
Code Monkey
Joined: Sep 2003
Posts: 488
[]J.C. said:
Cable modem users can shut their modem off for about 24 hours and get a new ip number. [/]

Or they can use an anonymous proxy list and do it in 5 seconds...over and over again until you pull your hair out

I've seen others have to contend with severe cases of this, not pretty at all.

And the proxy detection mod won't even detect it btw (that only works if it's transparent), I already tested.

http://www.proxy4free.com/page1.html

Every admin's nightmare.

Sponsored Links
smoknz28 #274914 06/15/2004 5:31 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]Twisty said:
And the proxy detection mod won't even detect it btw (that only works if it's transparent), I already tested.
[/]
Proxy detection mod? Explain, please.


Kind regards,
PaNTerSan
Brandon Long #274915 06/15/2004 10:47 PM
Joined: Sep 2003
Posts: 488
Code Monkey
Code Monkey
Joined: Sep 2003
Posts: 488
[]PaNTerSan said:

Proxy detection mod? Explain, please. [/]

Right here...

https://www.ubbdev.com/forum/showflat...prev=#Post91358

smoknz28 #274916 06/16/2004 2:19 PM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118


Kind regards,
PaNTerSan
Brandon Long #274917 06/16/2004 2:58 PM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]PaNTerSan said:
$extra2 .= " OR B_Hostname = '$ipMatch.%'";
[/]
should be
[]
$extra2 .= " OR B_Hostname LIKE '$ipMatch.%'";
[/]


Kind regards,
PaNTerSan
smoknz28 #274918 06/17/2004 1:23 AM
Joined: Mar 2004
Posts: 118
Journeyman
Journeyman
Offline
Joined: Mar 2004
Posts: 118
[]Twisty said:
And the proxy detection mod won't even detect it btw (that only works if it's transparent), I already tested.
Every admin's nightmare. [/]
I have this one user that really doesn't want to give up so he uses proxies. I just installed this proxy mod and I am very pleased with what I see

I got his real IP (which is banned) and proxy IP. There are two possibilities:
[*](1) He doesn't distinct between anonymous proxy and just a proxy, OR
[*](2) Not every "anonymous proxy" is truly anonymous

Since this user lacks knowledge of compures generally (1) seems to be the right choice. On the other hand (2) would seem logical since real anonymous proxies are indeed
[]Every admin's nightmare. [/]
Some admins may take their job to seriously and set up this fake anonymous proxies. This would somehow be a logical trap for users using proxies not for security reasons but to do some kind of damage.

Like in Matrix: you know that anomaly will happen at one point so why not try to have control over it


Kind regards,
PaNTerSan
Brandon Long #274919 06/17/2004 4:10 AM
Joined: Sep 2003
Posts: 488
Code Monkey
Code Monkey
Joined: Sep 2003
Posts: 488
[] PaNTerSan said:
I have this one user that really doesn't want to give up so he uses proxies. I just installed this proxy mod and I am very pleased with what I see [/]

Sweet, yeah it is indeed a very handy mod to be sure.

[] I got his real IP (which is banned) and proxy IP. There are two possibilities:
(1) He doesn't distinct between anonymous proxy and just a proxy, OR
(2) Not every "anonymous proxy" is truly anonymous

Since this user lacks knowledge of compures generally (1) seems to be the right choice. On the other hand (2) would seem logical since real anonymous proxies are indeed
every admin's nightmare.[/]

What's more likely is that he is using a proxy list from somewhere else which only lists tranparent ones (such lists are way more common). The anonymous proxies are only found at very specialized sites like the one I listed, of which there are just a handful.

So he probably isn't even aware of the differece.

[] Some admins may take their job to seriously and set up this fake anonymous proxies. This would somehow be a logical trap for users using proxies not for security reasons but to do some kind of damage.

Like in Matrix: you know that anomaly will happen at one point so why not try to have control over it [/]

It's only real if you think it is


Link Copied to Clipboard
Donate Today!
Donate via PayPal

Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.

Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.
Recommended Hosts
We have personally worked with and recommend the following Web Hosts:
Stable Host
bluehost
InterServer
Visit us on Facebook
Member Spotlight
Bill B
Bill B
Issaquah, WA
Posts: 87
Joined: December 2001
Forum Statistics
Forums63
Topics37,573
Posts293,925
Members13,849
Most Online5,166
Sep 15th, 2019
Today's Statistics
Currently Online
Topics Created
Posts Made
Users Online
Birthdays
Top Posters
AllenAyres 21,079
JoshPet 10,369
LK 7,394
Lord Dexter 6,708
Gizmo 5,833
Greg Hard 4,625
Top Posters(30 Days)
Top Likes Received
isaac 82
Gizmo 20
Brett 7
WebGuy 2
Morgan 2
Top Likes Received (30 Days)
None yet
The UBB.Developers Network (UBB.Dev/Threads.Dev) is ©2000-2024 VNC Web Services

 
Powered by UBB.threads™ PHP Forum Software 8.0.0
(Preview build 20240430)