Problem changing the setting of NukeSentinel

Gremmie · Posted: Tue Aug 12, 2008 7:41 am

Its not real clear what you have done. There was no need to uninstall NukeSentinel. There is no need to edit admin.php if you are using RavenNuke. It already works with NukeSentinel. The core edits don't apply if you are using RavenNuke, as it is already integrated with NukeSentinel. You are trying to use incompatible modules and have made hand edits to files we don't know about. Then you rant about the help you receive here. Nice.

You need to get back to a known configuration so we can help you. I suggest downloading and installing XAMPP on your local PC so you can install a fresh copy of RavenNuke and experiment there. Get your required modules to work together there in that environment, then you can upload to your production server. We will be glad to help you but it is hard to know what you have done from great distances.

kb9nha · Posted: Tue Aug 12, 2008 8:36 am

I've deleted the edited header.php & mainfile.php & replaced it with the backup copy of my old header.php & mainfile.php. Thus in essence, there's no edited files with the new NS install. Take your time Kguske...

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

Why are you using Admin Secure? This is old software (2004!), and I believe has been compromised. It may also conflict with NukeSentinel. Can I remove it?

The NukeSentinel files have been updated (and the files you mentioned above). Did you run the NSNST.php installation / upgrade script? Do the NS tables exist? (I'm behind a firewall and don't wish to load the site right now).

I'll check the Your Account module next.

kb9nha · Posted: Tue Aug 12, 2008 9:06 am

Admin Secure is an old software but it works. I've tested it & retested it. I prefer to keep it ( pls. don't remove) as additional protection.

I run the nsnst.php installation. The database entries for NS are there but I don't think the NS is working coz it doesn't look like it's catching any hack attempts. Normally I get at least 1 or 2 catches per day.

By the way, I replaced the header.php & mainfile.php with the edited one again. I've noticed that the edits in header.php serves a purpose, mainly cosmetic in nature. It will place a warning at the top of the site's page (IN TEST MODE) if you set the NS to Test Switch.

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

If you use admin authentication, you don't need Admin Secure. If you use Admin Secure, it's likely causing the conflict with admin authentication. Admin authentication is MUCH more secure than Admin Secure (or any other script), so I'd recommend not using it.

Just to clarify, what is the current problem (other than NukeSentinel not catching hack attempts)? I'll check the NukeSentinel configuration tonight, but I'll need a PM with admin user info for that. I should be able to check the Your Account during lunch.

kb9nha · Posted: Tue Aug 12, 2008 9:34 am

By the way, it's just my assumption that NS is not working coz I don't see any catches. The way I've tested NS before is to logout from the admin section then go back by clicking on the back arrow of the browser. NS cosidered this as hack attempt & bans me. I tried doing the same thing now with the new NS install but it will just take me to the admin login page. I'm not sure if this is just a new feature with the new NS or not.

The main problem really before I started this thread is the Admin Authentication. I'm unable to enable it. I've tried renaming the sample.htaccess, sample.staccess & sample.ftp access as instructed then CHMODed it to (666) as well as adding CGIAuth script inside the .htaccess & authenticate admin in the Admin Auth List without any luck.

kb9nha · Posted: Tue Aug 12, 2008 9:37 am

kguske, I'll make a temporary admin account for you so you can check the admin section. I'll e-mail you the admin account...

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

Your Account looks OK. The changes there are simply to record the true IP address using Nuke Sentinel functions.

Now, I'll look at NukeSentinel and admin authentication.

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

Still looking into this. I can make admin authentication work via htaccess, but still fighting issues with setting it up via NS.

kguske · Site Admin Joined: Jun 04, 2004 Posts: 6044

From what I can tell, this appears to be something server-related. I'm sure that isn't very helpful, but I've tried this on various other servers and haven't had issues. I'm not sure if admin authentication worked on this server with previous versions of NS, but I'd suspect that it did not.

kb9nha · Posted: Sun Sep 14, 2008 9:21 am

The NS still able to catch a hack attempt I think. I still get e-mails that it did so. The lists of blocked IPs remain empty though. That's probably why the NS block still showing that it caught (0) shameful hackers.