News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

httpBL

Started by Diego Andrés, February 17, 2010, 03:55:54 PM

Previous topic - Next topic

snoopy_virtual

Quote from: butchs on February 21, 2010, 07:37:02 PM
I heard that some people that were really mad at this sorta stuff too further action.  They would look up his property on the real-estate databases and send him a picture of his house as a reminder that they were not messing around.  Not that I know how to do that or know anyone who has done it.   ???

I have no idea too how to do something like that, and I swear I will never do something like that again.  ;D

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

Quote from: snoopy_virtual on February 20, 2010, 10:33:18 AM
...
I can see they use Windows NT 5.1 (and that's not normal for PC, but servers)
...

Sorry, that's a mistake.

Windows NT 5.1 actually means Windows XP, and that's very normal for PCs

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

Quote from: julieo on February 22, 2010, 03:04:28 AM
Sorry for newbie question...I'm amazed I've gotten this far. My forum is hosted on hostmonster.

I read and followed your tutorial but still confused. Registered at Honeypot. Got Honeypot, keyword and BL access key. Installed httpBL but don't know PHP and can't figure out what to do with the BL access key. You mention index.template.php on SMF mods page but can't find it anywhere. I use 1stPage for my web editor and have looked at the source but don't can't tell what I am supposed to change for my honeypot and BL access key from the comments in it.

I answered you a few hours ago this:

Quote from: snoopy_virtual on February 22, 2010, 04:43:28 AM
If you have already mod httpBL installed, just go to the settings page. (See pictures attached)

Fill all the fields, enable the mod and save.

Forget for now the file index.template.php The mod works better if you do the changes there, but without that it works as well and it's too long to explain.

You can do that when I finish the tutorial.

As I see that the new version of the mod is going to take me longer that I was expecting and at least one of the changes you should do is an important one, I have updated the tutorial explaining that step.

Read it:

http://www.snoopyvirtualstudio.com/tutoriales/index.php?estudio=httpBL_2

And tell me if everything goes ok for you.

If there is anything you don't understand, tell me as well.

BTW, you didn't tell me what versions of SMF and the mod you are using.

Everything in the tutorial is assuming you are using SMF 1.1.11 and the mod httpBL 2.2

For SMF 2.0 RC2 it's a lot easier.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

julieo

Thanks for the pictures. I did not see the MOD httpBL link on the side of the Admin panel and kept going into the Package area to find the settings.  Your pictures told me what to do...thanks again.  I can wait for you to finish your tutorial before I try the index changes.

snoopy_virtual

Quote from: julieo on February 24, 2010, 12:01:32 AM
Thanks for the pictures. I did not see the MOD httpBL link on the side of the Admin panel and kept going into the Package area to find the settings.  Your pictures told me what to do...thanks again.  I can wait for you to finish your tutorial before I try the index changes.

The first change, the one I just wrote in the tutorial is very important, because without the links to your honey pot in all the pages the mod doesn't work properly.

You should do it ASAP and wait for the next version to do the rest.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

I have just opened a section in my forum "For Developers Only" with the latest development file and all the old ones.

I'm getting a lot of suggestions via PM and I thought if we discuss all these kind of things in an open forum instead of via PM and we get more brains working together, we will work faster:

http://www.snoopyvirtualstudio.com/foro/index.php?topic=314.0

Please if you are not a developer and you don't know PHP code don't try to use the files there. Use the latest stable version instead.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

butchs

You may regret inviting me....   I am a hack, not a developer!  I use text editor and I do not take courses on programming...  :o
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

coyoteboy

Just to double-check on this, this works solely from IP address - i.e google/yahoo etc crawlers will not be affected as they should not be in the list of spammers?

aussieherps

Have got to step three using 1.1.11 BTW and it tells me to link as many pages to it from my site.
Very new at this stuff and got stuckat the congrats page from http://mysite/honeypot/***.com
Where do I put html codes so they work properly?
http://aussieherps.com">snakes lizards spiders turtles and much more

snoopy_virtual

Quote from: coyoteboy on February 25, 2010, 04:25:41 AM
Just to double-check on this, this works solely from IP address - i.e google/yahoo etc crawlers will not be affected as they should not be in the list of spammers?

Exactly. Legal crawlers are all white listed and they are not affected. There are actually thousands of them and the guys at Project Honey Pot update the list daily to add new good crawlers.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

snoopy_virtual

Quote from: aussieherps on February 25, 2010, 04:29:10 AM
Have got to step three using 1.1.11 BTW and it tells me to link as many pages to it from my site.
Very new at this stuff and got stuckat the congrats page from http://mysite/honeypot/***.com
Where do I put html codes so they work properly?

When you install the mod using the Packages Manager from your Admin area (as any other mod) all this html codes are done automatically.

The only thing you need to do manually is a little change in your index.template.php if you are not using the default Theme, but that's also in the manual.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

aussieherps

All good now thank you very much.
http://aussieherps.com">snakes lizards spiders turtles and much more

snoopy_virtual


El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

butchs

Those spammers are really hitting your httpBL hard at my forum.  I am seeing 20-30 hits from the same bot.  WOW!
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

lc62003

Quote from: butchs on February 25, 2010, 10:35:27 PM
Those spammers are really hitting your httpBL hard at my forum.  I am seeing 20-30 hits from the same bot.  WOW!


x2!!


In case the info is useful to you Snoopy.....

The same bot(s) hitting my forum have a pattern.  There are four IPs, but they do the same thing during the same period of time.  They hit the shoutbox for 24 hours, then off 24, then back again.  Just like clockwork.  At roughly 8 pm EST tomorrow evening I expect to see it/them again.   :o

butchs

Most of mine use the same IP addres.  I decided that I will add honeypot code the the warning file to make them pay for the evil deed!   8)
I have been truly inspired by the SUGGESTIONS as I sit on my throne and contemplate the wisdom imposed upon me.

giveaway365.com

Snoopy Sir,
I installed your mod and its very nice...

Thank you so much for this wonderful mod.

snoopy_virtual

#77
Quote from: lc62003 on February 25, 2010, 10:45:07 PM
In case the info is useful to you Snoopy.....

The same bot(s) hitting my forum have a pattern.  There are four IPs, but they do the same thing during the same period of time.  They hit the shoutbox for 24 hours, then off 24, then back again.  Just like clockwork.  At roughly 8 pm EST tomorrow evening I expect to see it/them again.   :o

Looks like a small botnet. That means a guy who had controlled a few computers and have exactly the same trojan in all of them.

Quote from: butchs on February 25, 2010, 10:50:28 PM
Most of mine use the same IP addres.  I decided that I will add honeypot code the the warning file to make them pay for the evil deed!   8)

That's already done since version 1.0

Read the code carefully and you will see it just before the close body tag.

Quote from: giveaway365.com on February 26, 2010, 02:29:41 AM
Snoopy Sir,
I installed your mod and its very nice...

Thank you so much for this wonderful mod.

You're welcome.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

giveaway365.com

Dear Snoopy Sir,
There are 3 things which I wanted to ask you for this mod.
1. After installation of this mod, is there any thing else to be done like submiting suspicious behaviour data ? or every thing is done automatically?

2. I have dynamic IP. Some IPs in my range are getting classified under suspicious IPs and I am not able to use my website as a admin. Is there any way to overcome this? Can I disable the catching of suspicious IPs?

3. Even if I am classified under suspicious IPs , I am still allowed to browse my website. Is that normal? It happens when I do refresh or use back button and try again. Does that mean that I have not installed the mod properly?

snoopy_virtual

1.- Every thing is done automatically.

2.- I'm working on that and will be sorted in next version.

3.- You must have installed it wrong. If your IP is suspicious you cannot (with this version) see the web site at all.

In next version, the admin will be always allowed in and also if the IP is not too dangerous (less than level 30) they will see a captcha to prove they are human and be able to pass. But with this version that's not possible yet.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

Advertisement: