Subject:*
<
Name/Email:*
<
Message Icon:*
<
Select*
<
Message:*
<



Click the Preview to see the content in action.
Options:*
<
Confirmation Code*
<
1 + 7 = ?  
Input the result from the expression
Maximum attempts you can try: 10
*
<
   

Re: Protector and Bad Ips
by goffy on 2017/7/26 20:23:27

hi geekwright

ok, nice to hear.
I recongnized again, that there is a big gap in my IT knowlegde

thank you very much for detailed explanation.
Re: Protector and Bad Ips
by geekwright on 2017/7/26 1:07:48

Actually, that looks like it is working.

Protector's bad IP works at the application level. That means Apache still gets the request, and launches the task. Protector checks the list, and when it matches, it sends out a short message like "You are registered as BAD_IP by Protector." Then it ends the task.

In the apache log, that will still be a 200 (found) with a small byte count.

In your log screen shot, all the 216.244.66.230 requests are logged as:
...HTTP/1.0" 200 289 "-"...

The 289 is the byte count of the reply, which is about right for the banned message, and much too small for a real page view.

That indicates that it is doing what it is supposed to do. To stop the transactions completely would require a firewall that stopped the requests before they reached Apache. The protector filter is just minimizing the load as best it can from inside the PHP script.
Re: Protector and Bad Ips
by goffy on 2017/7/25 20:54:08

Hi geekwright

I don't know?

Settings in protector:
Resized Image


screenshot from access.log of my server:
Resized Image
Re: Protector and Bad Ips
by geekwright on 2017/7/25 16:15:25

Ending with a dot should ban everything that matches up to the dot, i.e. 216.244.66. will ban 216.244.66.1, 216.244.66.2, 216.244.66.3, etc.

I've tested that on 2.5.7 and 2.5.9, and both are working as expected here. (The code changed to support IPV6 between the two versions.)

If there was a problem reading or writing the xoops_lib/modules/protector/config/badips file, you would be able to see that in the protector center.

I'm not sure what is going on in your case, as it works here.
Re: Protector and Bad Ips
by goffy on 2017/7/23 18:31:36

hi geekwright

XOOPS 2.5.7.2
Protector 3,52 Final

Who's Online

190 user(s) are online (107 user(s) are browsing Support Forums)


Members: 0


Guests: 190


more...

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Latest GitHub Commits