Page Index Toggle Pages: [1]  ReplyAdd Poll Send Topic
Hot Topic (More than 10 Replies) Bad Ban of gurdian accees proxy (Read 4653 times)
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
Bug Finder
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Bad Ban of gurdian accees proxy
Dec 19th, 2017 at 11:57pm
Mark & QuoteQuote  

ban this ban on calling from the props from the guardian of all, except for those who are listed on the white list as a whit even who should not be (the offender then and so it is necessary) -and ordinary visitors that banet automatically, can not be repaired?
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
Bug Finder
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #1 - Dec 20th, 2017 at 12:01am
Mark & QuoteQuote  

I put your whitelist address and the address of the admins and the captain of one for checking-the white list is working, but the guest from Nine Novgorod-Vera script banned along with the offender with the proxy working is the problem, the fact is I saw the site on which the ban call with the proxy implemented on the hurray-there from its place the call is normal and with the proxy writes-ay-ay-ay say it's not good you with the proxy climb the pier
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #2 - Dec 20th, 2017 at 1:42am
Mark & QuoteQuote  
The white-list is only to allow specified proxy servers through IF YOU HAVE THE 'Deny access through proxy servers?' TURNED ON.

Guardian bans go into the .htaccess file and that is read before YaBB is even called. So if a white-listed proxy IP gets banned for a violation, that ban over-rides the white-list.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #3 - Dec 20th, 2017 at 2:23am
Mark & QuoteQuote  
the whole point is that the proxy ban does not work as it should with the proxy, it banishes all the aipi immediately. Accepting even the usual for the proxy, and the access disappears altogether. if you do not insert your range into the whitelist, it's impossible at all to give a real proxy to the forum -a dolen to prohibit only the proxy-this system is faulty-and the question there like AIDI (login) can be parsed with an ip-insert-so that's how it divides by adi participants who are allowed to enter if banning all in a row-yesterday this system hzabanila normal guest from the lower Novgorod , together with a proxy on ushitelya which climbs to the forum, I govovoryu-whether it is possible to fix this setting buzopasnosti? -I say saw the site where it worked fine
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #4 - Dec 20th, 2017 at 4:05am
Mark & QuoteQuote  
Turning on the deny proxies blocks all proxies except for the specific IP or identifier you have in the white list. And even then, if someone using that proxy gets themselves blocked or banned, then that IP is blocked or banned.
 
If you want proxies to have access to your forum, then turn OFF the deny proxies. But if that proxy gets blocked due to another process, it's blocked, period, because the server reads the blocked list before it even loads YaBB. Which also means anyone else using that proxy is also blocked.

This is not a bug or an error.  This is how the system works. White-listed proxies are NOT protected from being added to the blocked IP list.

Any Mods to change this behavior in Guardian will have to wait until after the Chrstmas holiday.

Edited:
And if you have both 'Deny Proxies' checked and 'Auto add abusing IP addresses to .htaccess?' checked in the proxies section of Guardian, then all non-white-listed proxies will be automatically added to the blocked IP list.
« Last Edit: Dec 20th, 2017 at 12:31pm by Dandello » 
Reason: More 

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #5 - Dec 20th, 2017 at 4:47am
Mark & QuoteQuote  
so my alobi does not block the proxy blocking it-it also blocks the addresses of ordinary home computers in addition to the proxy, the system does not distinguish ordinary providers from proxy servers and blocks all
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #6 - Dec 20th, 2017 at 12:48pm
Mark & QuoteQuote  
Then TURN OFF DENY PROXIES and remove those IPs from the blocked IP list in Guardian.

Deny Proxies looks for certain codes that Proxy servers tend to use when sending out identifying information. However, it is possible that some Internet Service Providers also use those codes and so will be mis-identified as a proxy.

so TURN IT OFF.

  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #7 - Dec 20th, 2017 at 2:07pm
Mark & QuoteQuote  
Dandello wrote on Dec 20th, 2017 at 12:48pm:
Then TURN OFF DENY PROXIES and remove those IPs from the blocked IP list in Guardian.

Deny Proxies looks for certain codes that Proxy servers tend to use when sending out identifying information. However, it is possible that some Internet Service Providers also use those codes and so will be mis-identified as a proxy.

so TURN IT OFF.


Yes, not a few but all the bans I say, do not distinguish between simple home computers and a proxy-check out the test on your test forum if you do not believe it, and I do not understand at all how to put a white list on which the access is allowed, banit there until the user's identity does not come
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #8 - Dec 20th, 2017 at 3:02pm
Mark & QuoteQuote  
I have no idea WHY Guardian is reporting false positives on IP addresses that are not (supposedly) being passed through an 'official' proxy server. I can GUESS that the IPs in question are, in fact, being passed through their ISP in a way that makes them look like they are coming through a proxy server.

Now, once you have removed the mistaken banned IP addresses from the htaccess file, you can, in theory, white-list user names.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #9 - Dec 20th, 2017 at 3:23pm
Mark & QuoteQuote  
so the point is to add user names (logins) to the whitelist -if they are banned by this security setting-I do not understand how the customization works-erased the erroneous of guardians-and wrote it in the white list-how this setting will understand who to ban Who does not? -They come by an ip
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #10 - Dec 20th, 2017 at 4:56pm
Mark & QuoteQuote  
That section of code also checks against user names to determine if they have been whitelisted and are therefore allowed to access the forum via proxy.

White-listing does not protect them from being blocked by IP because they did something else.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #11 - Dec 20th, 2017 at 11:33pm
Mark & QuoteQuote  
you do not understand it is dolen to block a proxy and he keeps everything except the whitelist blocks-for example, they want new people to register and they can not write, you can not go in with a proxy, you can lose a contingent
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #12 - Dec 20th, 2017 at 11:55pm
Mark & QuoteQuote  
Then go into Guardian and TURN OFF DENY PROXIES.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #13 - Dec 21st, 2017 at 2:10pm
Mark & QuoteQuote  
You can’t have both Deny from Proxies and allow Proxies access. So either Deny Proxies has to be off OR Deny Proxies is on BUT  ‘Auto add abusing IP addresses to .htaccess?’ is unchecked in the Proxy Blocking Section so offenders are not automatically added to the .htaccess file and kept out of the forum altogether.

If you choose the later route, you will probably want to add the administrator’s email address to  'proxy_reason'         => q~Proxy Access to this forum is denied.~, in Error.lng so the potential new member can contact the administrator and asked to be let in.

This issue does suggest a Mod to automatically white-list members – but don’t expect it for a while.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #14 - Dec 21st, 2017 at 4:01pm
Mark & QuoteQuote  
Well, you deny it, no module, it's the basis for guards protection. I'm just saying I saw this proxy protection and it worked properly. The woods went through the forest and ordinary home computers came to the forum, I just do not remember the addresses, but everything worked
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #15 - Dec 21st, 2017 at 4:35pm
Mark & QuoteQuote  
Rucola wrote on Dec 21st, 2017 at 4:01pm:
The woods went through the forest and ordinary home computers came to the forum, I just do not remember the addresses, but everything worked
                     


And according to your account, some of those home computers registered as accessing the Internet via proxy.
All that a proxy server does is forward the request through a different IP address. Generally this is in an attempt of mask the true IP address of the computer in question - either they do not wish to be logged OR the IP address assigned to them by their ISP has reputation issues.
Being on a home computer does not automatically mean that computer is NOT using a proxy to get on the Internet.
I have a whole list of proxy servers I can access from my home computer. And I know of ISPs in the U.S. that use 'dynamic IP addresses' and some of those do a good imitation of a Proxy server - so much so that I have the 'Deny Proxies' function turned off on most of my forums.)

You say you want a 'repair' - I have told you what it is. (And yes, I am shouting.)

  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Rucola
Senior Member
****
Offline



Posts: 286
Location: Country Children Song
Joined: Aug 9th, 2017
Gender: Male
Mood: Adventurous
Zodiac sign: Taurus
Re: Bad Ban of gurdian accees proxy
Reply #16 - Dec 21st, 2017 at 6:56pm
Mark & QuoteQuote  
yes do what you want you are on your resource and in your rights-if it was as you say, this system would not ban everyone in a row so that no one can go to the forum-except those in the white list-and how to get into it if you are new and want to register, for example, I would like to give my api for whitelisting (which is inconvenient), so even the message can not be sent to the admin (for guests such a chip) immediately to the ban and you write with a proxy, list and you will come-if you come to you after all without a proxy? -Aypy constant-then you are right you do not have to repair it, you need it-and again I repeat that no module
  
Back to top
 
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #17 - Dec 21st, 2017 at 7:40pm
Mark & QuoteQuote  
There is nothing to 'repair'. Guardian is not 'making up' data. It responds to the data given. It has no way to determine a 'good' proxy from a 'bad' proxy or whether or not a wifi hot-spot or an Internet Server provider is sending data that indicates a computer is using proxy server.

Your choice: Turn OFF Deny Proxies. Or keep Deny Proxies turned on and turn off the 'automatically add to .htaccess' so those 'innocent' people can get the admin's email address (assuming it's posted where they can see it - like in the default.html ) and ask to be let in and have either their IP address white-listed or the admin makes them a member and adds their user name to the white-list.

OR you can wait until I have have time next year to create a Mod for automatically white-listing members.

And again, an IP address is white-listed that white-listing is for ANYONE using that IP address. Also, a white-listed IP address can be blocked. Being white-listed does not prevent that.

An speaking of IP bans - you came within about 2 seconds of being automatically IP blocked HERE. Hitting the refresh on an error page is a good way to get IP blocked.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Paste Member Name in Quick Reply Box Dandello
Forum Administrator
YaBB Modder
*****
Offline


I love YaBB 2.7!

Posts: 2235
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Mood: Annoyed
Zodiac sign: Virgo
Re: Bad Ban of gurdian accees proxy
Reply #18 - Dec 22nd, 2017 at 12:52pm
Mark & QuoteQuote  
A quick possible fix for your proxies problem:

In Sources/Guardian.pm find
Code (Perl)
Select All
    # Proxy Blocker 


add after:
Code (Perl)
Select All
     my $whitelisted = 0;
     our %memberlist;
     require Variables::Memberlist;
     if (    $memberlist{$username}
          || $action eq 'login'
          || $action eq 'login2'
          || $action eq 'register'
          || $action eq 'register2'
          || $action eq 'guestpm' )
     {
          $whitelisted = 1;
     } 


also find:
Code (Perl)
Select All
     my @white_list = split /[|]/xsm, $whitelist;
     my $whitelisted = 0;
     foreach my $i (@white_list) {
         chomp $i;
         if (
             (
                    $proxy0 =~ m/$i/xsm
                 || $proxy1 =~ m/$i/xsm
                 || $proxy2 =~ m/$i/xsm
                 || $proxy3 =~ m/$i/xsm
                 || $username eq $i
             )
             && $i ne q{}
           ) 


and replace with
Code (Perl)
Select All
     my @white_list = split /[|]/xsm, $whitelist;
     foreach my $i (@white_list) {
         chomp $i;
         if ( $i ne q{} &&
             (
                    $proxy0 =~ m/$i/xsm
                 || $proxy1 =~ m/$i/xsm
                 || $proxy2 =~ m/$i/xsm
                 || $proxy3 =~ m/$i/xsm
                 || $username eq $i
             )
           ) 



This has NOT been tested but should white-list all members and allow people using proxies to register, login, reset their password, or contact the Admin.

Also, in Anti-Spam settings: make sure 'Activate speed-post detection and banning?' is checked and 'Post speed' is set to something like 5 and 'ErrorLog speed banning.' is set to something like 15 - too low and even bots won't trip it, too high and you catch members who think it's clever to keep refreshing errors.

This section in Anti-Spam settings is the reason why I don't need to block proxies on my forums - the bad bots trip themselves up by acting like bots - and repeating the same error over and over and over again.
  

Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Page Index Toggle Pages: [1] 
ReplyAdd Poll Send Topic
Bookmarks: del.icio.us Digg Facebook Google LinkedIn reddit Twitter Yahoo
Bad Ban of gurdian accees proxy

Please type the characters exactly as they appear in the image,
without the first 2 and last 2 characters.
The characters must be typed in the same order,
and they are case-sensitive.
Open Preview Preview

You can resize the textbox by dragging the right or bottom border.
Off Topic Comment Insert Spoiler
Insert Hyperlink Insert FTP Link Insert Image Insert E-mail Insert Media Insert Table Insert Table Row Insert Table Column Insert Horizontal Rule Insert Teletype Insert Code Insert Quote Edited Superscript Subscript Insert List /me - my name Insert Marquee Insert Timestamp No Parse
Bold Italicized Underline Insert Strikethrough Highlight
                       
Change Text Color
Insert Preformatted Text Left Align Centered Right Align
resize_wb
resize_hb







Max 5000 characters. Remaining characters:
Text size: %
More Smilies
View All Smilies
Collapse additional features Collapse/Expand additional features Smiley Wink Cheesy Grin Angry Sad Shocked Cool Huh Roll Eyes Tongue Embarrassed Lips Sealed Undecided Kiss Cry