News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

httpBL

Started by Diego Andrés, February 17, 2010, 03:55:54 PM

Previous topic - Next topic

snoopy_virtual

QuoteI think it might be better to expand this explanation a bit further or remove it to save the confusion.

You are right. I just wrote there a quick explanation planning to do it better some day but I never find the time to finish that tutorial.

Some of these days (I hope ...)

Anyway you won't have to worry about that if in your site you only have SMF.

Do you have (apart from SMF) any other program in your site connect with a bridge? (Mambo, Joomla, Coppermine, Drupal, etc)

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

Niklas_

Hi guys

That really sounds like a great mod to me, but I'm kind of worried about legal issues.
IP addresses are considered personal data in Germany (at least by some people, e.g. the judges in Hamburg), so I'm not really allowed to send them to any other organisation. That is especially critical if that other organisation is situated outside of the EU.
So I have two questions:
- Where is the httpBL Project hosted?
- Are there any other people from Germany using this mod, and have they considered the legal issues?
(for reference you might want to take a look at one of the recent Articles in c't 5/11 (in german) http://www.heise.de/artikel-archiv/ct/2011/5/154_kiosk)

Thanks
Niklas

snoopy_virtual

Hi Niklas

Quote- Where is the httpBL Project hosted?

It is an international organization but based on USA.

If you visit their main site http://www.projecthoneypot.org and read their "about" page you will see that it's actually an organization made by a group of lawyers and a group of program coders working together to fight international spam, so they are also very much concern about legal issues.

Also (for that reason) when you open an account with them to join the project they always ask you for your nationality, because the laws are not the same in every country.

I think the best thing you could do is to open an account in their site, so you can post in their forum (you will need it anyway if you want to use this mod) and ask them directly about your legal concerns.

As I say a lot of them are lawyers and would be able to help you out with all that.

Or (if you don't want to open an account yet) send them an email asking your question.

Quote- Are there any other people from Germany using this mod, and have they considered the legal issues?

I am not sure about it, but I think I have seen some people from Germany using it.

You will need to wait until any of them answer you this question, but (just in case they don't see it) I will try to do a search and I will send you a PM if I find any of them.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

mrselnombre

Is there anyway to test this mod to make sure it is working?
(\__/)
(='.'=)This is Bunny. Copy and paste bunny into your
(")_(")signature to help him gain world domination.
Total Twaddle.

snoopy_virtual

After the mod is installed and activated, if you visit the config page (Admin => mod httpBL => config) you should see a green sign saying the mod is working properly.

Also, after the mod has been running for a few hours, you should see in the httpBL log page some bots stopped by the mod.

In all my forums the mod stops an average of 5 - 10 bots a day.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

mrselnombre

it took a few hours, but my log is filling up now...
fab mod!
(\__/)
(='.'=)This is Bunny. Copy and paste bunny into your
(")_(")signature to help him gain world domination.
Total Twaddle.

DJ-X

100-150 robots in the day, almost all go through Tor !

busterone

You can be very surprised at the amount of bots scraping and attempting to post in a forum in just one day.   ;)

DJ-X

#628
Ipv6 - IIS7 - Mod httpBL is ON

Ipv4 _http://localhost/ [nofollow]
Ipv6 _http://[::1]/ [nofollow]

Database Error
Please try again. If you come back to this error screen, report the error to an administrator.

Mod httpBL is OFF = operating normally.

Who's Online: Guest (0.0.0.0)  ;)

Open _http://yoursite.com/yourhoneypot.php [nofollow]

A validation error occurred. If this problem persists, you will need to generate a new script.

iigor

Hi,

I have recently installed the httpBL mod and in a first few days it managed to stop about 1000 attempts to enter my forum.
Many thanks for that!  :) :)
But I have found out that my error log is flooded with errors from httpBL:

8: Undefined index: httpBL_unknown
File: /home/agilityh/public_html/forum/Sources/httpBL_Subs.php
Line: 674


and I have about 20 successfull registrations from spammers per day.

My SMF version is 1.1.13, httpBL: 2.2.3

Thanks

snoopy_virtual

@DJ-X

I don't understand if you are trying to explain here a few different problems or just one problem. Could you explain that a little more?

Anyway let's see if I can see what you are trying to say:

Quote from: DJ-X on April 04, 2011, 04:31:18 PM
Ipv6 - IIS7 - Mod httpBL is ON

Ipv4 _http://localhost/
Ipv6 _http://[::1]/

Database Error
Please try again. If you come back to this error screen, report the error to an administrator.

Mod httpBL is OFF = operating normally.

This mod only works for IPv4, as the database of spammers in Project Honey Pot doesn't support yet IPv6.

Anyway I don't understand what you were trying to say there. Could you explain it?

Quote from: DJ-X on April 04, 2011, 04:31:18 PM
Who's Online: Guest (0.0.0.0)  ;)

Are you having a guest with the IP 0.0.0.0?

We were trying to investigate that possibility some weeks ago but couldn't get any good explanation really. It can be a robot (or a human) hiding their real IP or somebody visiting your site with a bad browser that doesn't identify the IP properly.

Quote from: DJ-X on April 04, 2011, 04:31:18 PM
Open _http://yoursite.com/yourhoneypot.php

A validation error occurred. If this problem persists, you will need to generate a new script.

What are you doing?

NEVER VISIT YOUR HONEY POT AFTER INSTALLATION

You only visit your honey pot once, when you activate it.

You should have done that ages ago, because the mod httpBL doesn't work without a honey pot already activated and working.

So why are you trying to visit your honey pot again?

===================

@iigor

Quote from: iigor on April 05, 2011, 03:37:09 AM
Hi,

I have recently installed the httpBL mod and in a first few days it managed to stop about 1000 attempts to enter my forum.
Many thanks for that!  :) :)
But I have found out that my error log is flooded with errors from httpBL:

8: Undefined index: httpBL_unknown
File: /home/agilityh/public_html/forum/Sources/httpBL_Subs.php
Line: 674


and I have about 20 successfull registrations from spammers per day.

My SMF version is 1.1.13, httpBL: 2.2.3

Thanks

I have never done a version 2.2.3 for mod httpBL.

The current version is 2.5.1

Please check that and if you are not using the latest version, un-install whatever version you have and install the latest one.

If after that you are still having that error check that you have all the correct string lines inside the file Modifications.english.php in the folder /Themes/default/languages/

If you are not using the default Theme and/or you are not using English let me know and I will tell you where to look for the proper language lines.

Anyway, if you are having 20 spammers registrations per day you have something wrong.

Apart from this mod what other anti-spam mods are you using?

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

Arantor

Visitors using IPv6 will show up as 'unknown' aka 0.0.0.0.

snoopy_virtual

Oh yes, of course. You are right.

Still I don't understand the error DJ-X was trying to explain. What is that about "Database Error"?

When the IP is 'unknown' the mod just add an entry to the log saying that and let the visitor pass.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

iigor

Quote from: snoopy_virtual on April 05, 2011, 04:23:48 AM

I have never done a version 2.2.3 for mod httpBL.

The current version is 2.5.1

Please check that and if you are not using the latest version, un-install whatever version you have and install the latest one.

If after that you are still having that error check that you have all the correct string lines inside the file Modifications.english.php in the folder /Themes/default/languages/

If you are not using the default Theme and/or you are not using English let me know and I will tell you where to look for the proper language lines.

Anyway, if you are having 20 spammers registrations per day you have something wrong.

Apart from this mod what other anti-spam mods are you using?

I have the latest version installed 2.5.1, have picked the wrong version from another mod, sorry.
My theme is babylon and language is croatian.
Except for reCaptcha and httpBL I don't have any other anti-spam mod installed.

snoopy_virtual

Hi iigor

With version 2.5.1 you shouldn't have that error, so definitely there is something wrong with your language string lines.

As this mod has not been translated to Croatian yet it should be using the English instead, so (as I said before) check that you have all the correct string lines inside the file Modifications.english.php in the folder /Themes/default/languages/

They start with a line saying:

// MOD httpBL START

and finish with a line saying:

// MOD httpBL END

You can find the proper ones in the mod main page: http://custom.simplemachines.org/mods/index.php?mod=2155 or inside the files languages.xml and languages_utf8.xml (inside the mod's package).

The theme babylon shouldn't have any language files, apart from the Settings.whatever.php but (just in case) check if you have any other files inside the folder /Themes/babylon/languages/

If you have any other file there, compare them with the files in the default folder (to add the missing lines to all of them until they are exactly the same files) and then delete the files inside the /babylon/languages/ folder and leave only the files inside the default folder.

If you don't understand all that let me know and I will explain it again more slowly or contact me through Skype and we will do it together in a minute.

=========

QuoteExcept for reCaptcha and httpBL I don't have any other anti-spam mod installed.

reCaptcha is not good at all. All modern bots can jump that captcha very easy. You can leave it there or un-install it, it's no difference, but it's not stopping none of them.

Mod httpBL on its own is not good enough to stop them. I would suggest you to add these 2 mods as well:

- Anti-Spam Verification Questions

- Stop Spammer

With the 3 mods working together you will see a big difference.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

iigor

Hi Snoopy,

Thanks for pointing me in the right direction.
The magic sentence was
Quote
The theme babylon shouldn't have any language files, apart from the Settings.whatever.php but (just in case) check if you have any other files inside the folder /Themes/babylon/languages/

I had Modifications.croatian-utf8.php there, and after removing the file, it seems that everything is working OK now. No entries in the log file.

I have installed Stop spammer but the Anti-spam verification question gives me an error on install on Register.php??
But that's another problem...

Thanks for Your help!

snoopy_virtual

Quote
I had Modifications.croatian-utf8.php there, and after removing the file, it seems that everything is working OK now. No entries in the log file.

Before deleting it you should have checked if the file Modifications.croatian-utf8.php inside the default folder was exactly the same. If not you should have copied the missing lines from the "babylon" one to the "default" one or you may have problems with other mods.

Quotethe Anti-spam verification question gives me an error on install on Register.php??

I think somebody already sorted that in the support topic:

http://www.simplemachines.org/community/index.php?topic=276309.0

But I am not 100% sure about it.

If you cannot find a solution yourself ask in that topic or try to parse the mod for a manual installation, as it only have a few lines in Register.php

But that mod is definitely a "must have", as it stops on its own a lot more spammers than all the rest put together.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

iigor

Thanks for the info.

I found the error myself, an extra line in the search text of Register.template.php (not Register.php), I'm getting old... :-[

Now all the Three musketeers stand in defense.  :) :) :)

Thank You for Your time!

snoopy_virtual

No problem.  ;)

Just for curiosity: Could you report back in a few days time to tell us what's the number of spammer registrations you have now?

I suppose it will be a lot less than the 20 a day you are having now, but I would like to know exactly how many.

El verdadero sabio es aquel que lo ve todo, lo estudia todo, lo analiza todo y molesta poco.
A true wise man is he who sees everything, studies everything, analyses everything and hardly ever annoys.

DJ-X

#639
Make  Mod httpBL stopped working when the website  user Ipv6, but continued to work when users go to Ipv4.
Server IIS 7.5 with Ipv4 and Ipv6 - SMF 1.1.13

Mod httpBL is On - user Ipv6
Database Error
Please try again. If you come back to this error screen, report the error to an administrator.

Forum Error Log

Guest     Today at 00:45:07

http://mysite.com/index.php [nofollow]

8: Undefined variable: ip
File: C:\inetpub\wwwroot\mysite\Sources\httpBL_Subs.php
Line: 519

       Guest     Today at 00:45:07
   
http://mysite.com/index.php [nofollow]

2: Missing argument 1 for httpBL_look_for_empty_ip(), called in C:\inetpub\wwwroot\mysite\Sources\httpBL_Subs.php on line 680 and defined
File: C:\inetpub\wwwroot\mysite\Sources\httpBL_Subs.php
Line: 517

Advertisement: