11
irmtfan
Re: Local support issues
  • 2013/4/8 9:00

  • irmtfan

  • Module Developer

  • Posts: 3419

  • Since: 2003/12/7


@Defkon1:
I nearly sure his IP is in some black lists.
do you activate sfs protection in protector?

12
Defkon1
Re: Local support issues
  • 2013/4/8 10:35

  • Defkon1

  • Not too shy to talk

  • Posts: 151

  • Since: 2005/1/27


actually timgno is seen by Protector as DoS attacker:

8/4/2013 11:46:53 timgno 89.***.***.*** Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS

so imho Protector is working fine...

13
Defkon1
Re: Local support issues
  • 2013/4/8 10:40

  • Defkon1

  • Not too shy to talk

  • Posts: 151

  • Since: 2005/1/27


Full log of the last month for this user:

8/4/2013 11:46:53 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
7/4/2013 23:36:17 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
7/4/2013 23:35:52 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 CRAWLER
4/4/2013 19:38:29 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
4/4/2013 0:31:31 timgno 89.***.***.***
Safari/537.31Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.43 Safari/537.31 DoS
1/4/2013 12:08:50 timgno 89.***.***.***
Safari/537.22Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22 DoS
31/3/2013 22:16:41 timgno 89.***.***.***
Safari/537.22Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22 DoS

@timgno do you use some kind of preload extension/plugin that could be responsible for high traffic/huge requests?

14
timgno
Re: Local support issues
  • 2013/4/8 13:44

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


Quote:
Defkon1 wrote:
@timgno do you use some kind of preload extension/plugin that could be responsible for high traffic/huge requests?

I'm using 3 files of preload in system/preloads
Google Plus, Google Search and Google Analytics

15
timgno
Re: Local support issues
  • 2013/4/8 20:04

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


defkon1 let me know because I'm afraid of messing, I answer to your question as if we were talking about my site and not of xoopsitalia

can explain better what you mean by preload?

16
irmtfan
Re: Local support issues
  • 2013/4/9 2:26

  • irmtfan

  • Module Developer

  • Posts: 3419

  • Since: 2003/12/7


protector really need a white page feature.
white page IPs
white page User IDs
white page group IDs
currently it only have a white page IPs for Group ID=1
It is very limited.
I sent a feature request months ago.
Also protector needs a complete rewrite. because it has ancient coding.

17
timgno
Re: Local support issues
  • 2013/4/9 7:23

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


Sorry for the confusion!
I think I know the secret!

I installed several extensions on Chrome and I think one or more of them could be the problem.

I did a test right now with firefox and I have no problems navigating between pages.

Sorry defkon1 you check again?

You should find Mozilla FireFox, this time!

it's all good now

18
timgno
Re: Local support issues
  • 2013/4/9 12:31

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


If it were to ban me, protector should have the same problems here on xoops.org ...!!!

A few days ago I played on xoops France, and has not banned me while going on different pages

Anyway I deleted all extensions and plugins from Google Chrome, but the problem remains the same on xoopsitalia.org

At this point I don't know what can be

19
timgno
Re: Local support issues
  • 2013/4/11 12:42

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


I disabled all plugins and extensions on Google Chrome and I find in my protector that I inject myself.

Quote:
9/4/2013 9:10:59 Ospiti 89.***.***.***
Safari/537.31 CONTAMI Attempt to inject 'xoopsConfig' was found.


How is this possible?

In addition I also tdmdownloads is often injected by guests.

Quote:
9/4/2013 12:14:30 Ospiti 117.213.115.227
IE 6.1 SQL Injection SELECT * FROM `xxxx_tdmdownloads_downloads` WHERE (status != '0' AND cid IN (6,5,8,7,9,11,12,1,3,2,4,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30) AND cid = '2') ORDER BY rating'" ASC

20
timgno
Re: Local support issues
  • 2013/4/29 13:57

  • timgno

  • Module Developer

  • Posts: 1504

  • Since: 2007/6/21


There are very serious problems on xoopsitalia to send messages in the forum, you can not save the content in any way.

Defkon1 thought was a dos attack from any extensions/plugins of chrome, but after trying with all 5 major browsers the problem is the same, so I don't think it is attacking but if others could verify and report what was said would be better.

I would not have a problem with my computer also why this should happen on my site or on xoops.org if so.

Login

Who's Online

238 user(s) are online (169 user(s) are browsing Support Forums)


Members: 0


Guests: 238


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits