11
irmtfan
Re: Local support issues
  • 2013/4/8 9:00

  • irmtfan

  • Module Developer

  • Posts: 3419

  • Since: 2003/12/7


@Defkon1:
I nearly sure his IP is in some black lists.
do you activate sfs protection in protector?

12
Defkon1
Re: Local support issues
  • 2013/4/8 10:35

  • Defkon1

  • Not too shy to talk

  • Posts: 151

  • Since: 2005/1/27


actually timgno is seen by Protector as DoS attacker:

8/4/2013 11:46:53 timgno 89.***.***.*** Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS

so imho Protector is working fine...

13
Defkon1
Re: Local support issues
  • 2013/4/8 10:40

  • Defkon1

  • Not too shy to talk

  • Posts: 151

  • Since: 2005/1/27


Full log of the last month for this user:

8/4/2013 11:46:53 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
7/4/2013 23:36:17 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
7/4/2013 23:35:52 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 CRAWLER
4/4/2013 19:38:29 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
4/4/2013 0:31:31 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
1/4/2013 12:08:50 timgno 89.***.***.***
Safari/537.22Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22 DoS
31/3/2013 22:16:41 timgno 89.***.***.***
Safari/537.22Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22 DoS

@timgno do you use some kind of preload extension/plugin that could be responsible for high traffic/huge requests?

14
timgno
Re: Local support issues
  • 2013/4/8 13:44

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


Quote:
Defkon1 wrote:
@timgno do you use some kind of preload extension/plugin that could be responsible for high traffic/huge requests?

I'm using 3 files of preload in system/preloads
Google Plus, Google Search and Google Analytics

15
timgno
Re: Local support issues
  • 2013/4/8 20:04

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


defkon1 let me know because I'm afraid of messing, I answer to your question as if we were talking about my site and not of xoopsitalia

can explain better what you mean by preload?

16
irmtfan
Re: Local support issues
  • 2013/4/9 2:26

  • irmtfan

  • Module Developer

  • Posts: 3419

  • Since: 2003/12/7


protector really need a white page feature.
white page IPs
white page User IDs
white page group IDs
currently it only have a white page IPs for Group ID=1
It is very limited.
I sent a feature request months ago.
Also protector needs a complete rewrite. because it has ancient coding.

17
timgno
Re: Local support issues
  • 2013/4/9 7:23

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


Sorry for the confusion!
I think I know the secret!

I installed several extensions on Chrome and I think one or more of them could be the problem.

I did a test right now with firefox and I have no problems navigating between pages.

Sorry defkon1 you check again?

You should find Mozilla FireFox, this time!

it's all good now

18
timgno
Re: Local support issues
  • 2013/4/9 12:31

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


If it were to ban me, protector should have the same problems here on xoops.org ...!!!

A few days ago I played on xoops France, and has not banned me while going on different pages

Anyway I deleted all extensions and plugins from Google Chrome, but the problem remains the same on xoopsitalia.org

At this point I don't know what can be

19
timgno
Re: Local support issues
  • 2013/4/11 12:42

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


I disabled all plugins and extensions on Google Chrome and I find in my protector that I inject myself.

Quote:
9/4/2013 9:10:59 Ospiti 89.***.***.***
Safari/537.31 CONTAMI Attempt to inject 'xoopsConfig' was found.


How is this possible?

In addition I also tdmdownloads is often injected by guests.

Quote:
9/4/2013 12:14:30 Ospiti 117.213.115.227
IE 6.1 SQL Injection SELECT * FROM `xxxx_tdmdownloads_downloads` WHERE (status != '0' AND cid IN (6,5,8,7,9,11,12,1,3,2,4,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30) AND cid = '2') ORDER BY rating'" ASC

20
timgno
Re: Local support issues
  • 2013/4/29 13:57

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


There are very serious problems on xoopsitalia to send messages in the forum, you can not save the content in any way.

Defkon1 thought was a dos attack from any extensions/plugins of chrome, but after trying with all 5 major browsers the problem is the same, so I don't think it is attacking but if others could verify and report what was said would be better.

I would not have a problem with my computer also why this should happen on my site or on xoops.org if so.

Login

Username:
Password:

Lost Password? Register now!

Who's Online

74 user(s) are online (45 user(s) are browsing Support Forums)


Members: 0


Guests: 74


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Jan 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits