| Author |
Message |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 11:15 am |
|
Ok, I ignored it at first but now I'm seeing quite a few problems and decided to post about it.
When I first upgraded to 2.5 I thought everything was working perfectly. Then I kept getting emails from Users who were saying they were banned for an "Unknown" attack the second they loaded the site. It was ok here at home, but I tried it at work and got the same thing. I then tried it from school (ITT Tech) and it loaded fine.
My banned IPs table was empty and there was no reason it should be banning people randomly like that. I went back to 2.4.2pl9 and everything was working normally again.
After a few days of watching these forums, there were no mentions of this other than the "invalid IP" issue, so I tried to upgrade again. Same thing happened. So I went back to the old version and am still running it.
The point is, there is something wrong with this version and I would have never even knew about it until Users started emailing me and telling me. From here at home, it worked perfectly and I thought everything was ok.
I tried both a full install again, and just the upgrade files. Both are buggy on my site.
If you have 2.5 installed, load the site from various locations/IP addresses and see how it behaves. Let's try and figure out the problem and get it fixed.
The only thing I should mention is that I do not run the IP to Country part of it. I see no need to ever ban a whole Country from my site because of a few bad people. |
Last edited by manunkind on Mon Jul 17, 2006 9:23 pm; edited 1 time in total |
|
|
 |
ikvat New Member


Joined: Sep 10, 2005 Posts: 4
|
Posted:
Sun Jul 16, 2006 11:40 am |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 11:47 am |
|
| ikvat wrote: | | http://www.ravenphpscripts.com/postt10430.html |
If you start a new thread, your problem will be looked at faster.  |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 11:50 am |
|
Did you import all the IP2C data?
This is not a bug, Sentinel is operating as it should. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 11:53 am |
|
I've never used it with any version of NS and it's been fine. Does 2.5 require it now?
The nuke_nsnst_ip2country table has always been completely empty. |
|
|
|
 |
Gremmie Former Moderator in Good Standing

Joined: Apr 06, 2006 Posts: 2415 Location: Iowa, USA
|
Posted:
Sun Jul 16, 2006 12:02 pm |
|
One user of mine has reported this problem. I also do not have the IP2C data imported, nor do I use that feature. |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 12:03 pm |
|
This is my understanding of how it works;
Sentinel compares the incoming IP against the IP2C data to try to determine whether it is a genuine IP - or put another way, as far as the IP is concerned, Sentinel does a 'ok lets see if you are really who you say you are' in its attempts to combat hack attempts.
I'm sure that if I have got this wrong, someone will correct me pretty quickly. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 12:14 pm |
|
Hmmm....if this is true, and my nuke_nsnst_ip2country is empty, then wouldn't every single user be banned from the site? Even me?
It's fine here at home, and it was fine at school. But I'm banned when I access it from work, and many other Users are banned as well.
But everything is ok with 2.4.2pl9. |
|
|
|
 |
ikvat New Member


Joined: Sep 10, 2005 Posts: 4
|
Posted:
Sun Jul 16, 2006 12:41 pm |
|
| manunkind wrote: | | ikvat wrote: | | http://www.ravenphpscripts.com/postt10430.html |
If you start a new thread, your problem will be looked at faster. | yes, but you're obliged to follow a plenty of topics  |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 1:20 pm |
|
Straight from the Manual posted on this site:
| Quote: | | This is an OPTIONAL feature, and it NOT required for normal NukeSentinel(tm) operation. |
(talking about IP to Country) |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 1:41 pm |
|
| manunkind wrote: | Straight from the Manual posted on this site:
| Quote: | | This is an OPTIONAL feature, and it NOT required for normal NukeSentinel(tm) operation. |
(talking about IP to Country) |
Well I know that manual is getting a little old now but point taken. I have never had this type of error so I cannor reproduce it but if your IP is one of the ones that gets banned feel free to visit and lets see what happens.
Have you tried with your firewall turned off etc. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 1:48 pm |
|
I'm fine here at home, but hang tight. I'm sending a User there who was banned from my site when I had 2.5 running. Let's see what happens. If he says it happened again, I'll get his IP and we'll see what is causing it. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 3:25 pm |
|
He was able to get into your site just fine. Makes no sense to me. |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 4:32 pm |
|
Well I suggest importing all the IP2C data and take it from there - if nothing else, we can rule that out and look elsewhere for the problem. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 4:55 pm |
|
Ok, I have 2.5 running with all the IP to Country stuff installed.
Can everybody access my site?
|
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 5:46 pm |
|
I can. Your first news article is about microsoft fighting web spam. |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 5:49 pm |
|
Ok, I will wait and see if the Users have the problem again.
I have everything ready to quickly go back to 2.4.2pl9 |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 6:30 pm |
|
Well, the one User that was banned before can now get in. So it looks, so far, like IP to Country is no longer optional. It's a requirement. |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 6:38 pm |
|
In a way, thats the best news I have heard all night!!!!! |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 6:41 pm |
|
Thanks for all your help.  |
|
|
|
 |
Guardian2003 Site Admin

Joined: Aug 28, 2003 Posts: 6373 Location: Vsetin, Czech Republic
|
Posted:
Sun Jul 16, 2006 6:46 pm |
|
Not a problem, it has done wonders for my post count  |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 6:47 pm |
|
|
|
 |
Gremmie Former Moderator in Good Standing

Joined: Apr 06, 2006 Posts: 2415 Location: Iowa, USA
|
Posted:
Sun Jul 16, 2006 8:18 pm |
|
I've never done this before. Am I supposed to click on each country in the Import to Blocked Ranges and then click on each country in the Import to IP2Country both? |
|
|
|
 |
manunkind Client

Joined: Apr 26, 2004 Posts: 368 Location: Albuquerque, NM
|
Posted:
Sun Jul 16, 2006 8:24 pm |
|
Just import to IP2Country. That populates the tables. |
|
|
|
 |
kguske Site Admin

Joined: Jun 04, 2004 Posts: 6044
|
Posted:
Mon Jul 17, 2006 10:02 am |
|
Please also see and posted related messages there. |
|
|
|
 |
|
|
|
|