Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel(tm)
Author Message
xGSTQ
Involved
Involved



Joined: Feb 03, 2006
Posts: 269

PostPosted: Fri May 16, 2008 12:24 pm Reply with quote

Hey peeps

i am being inundated (only about 15 so far lol ) with UK AOL ISP users saying they are being blocked by sentinel from entering my site

on looking into this matter further its not actually banning them but just blocking them stating they are using an invalid IP

here is a list of some of the IP's it is blocking that the users have sent me

92.20.212.92
92.4.153.10
92.0.201.229
92.11.1.199
92.251.80.148
92.1.171.247

after chatting to the individuals i found out that they were all AOL users and one contacted AOL directly and they informed them that they were in the process of moving all UK clients from US servers to UK.. and there was nothing that they could do.

Im presuming the range has been banned, but not by me .. by default settings in Sentinel.

should i just remove the range ban ?

im using Sentinel version 2.5.16
 
View user's profile Send private message Send e-mail
jakec
Site Admin



Joined: Feb 06, 2006
Posts: 3048
Location: United Kingdom

PostPosted: Fri May 16, 2008 12:26 pm Reply with quote

Have you got the proxy blocker turned on?
 
View user's profile Send private message
xGSTQ







PostPosted: Fri May 16, 2008 12:29 pm Reply with quote

set to mild yes
 
jakec







PostPosted: Fri May 16, 2008 12:33 pm Reply with quote

Try switching it to lite, or off completely.
 
xGSTQ







PostPosted: Fri May 16, 2008 12:36 pm Reply with quote

ok ill give it a blast, wont it allow users to use programs such as Hide IP dont they abuse proxys

thanks for your fast replies jakec, much appreciated !
 
jakec







PostPosted: Fri May 16, 2008 12:39 pm Reply with quote

Possibly, the problem is AOL use proxies.
 
Guardian2003
Site Admin



Joined: Aug 28, 2003
Posts: 6799
Location: Ha Noi, Viet Nam

PostPosted: Fri May 16, 2008 1:46 pm Reply with quote

Yes, the problem is with them moving to UK IP addresses.
The chances are high that they have been given a block, or several blocks (CIDR's) of IP addresses but they haven't told anyone they are actually using them.

As a consequence of their 'mushroom' mentality, the IP's may well still be listed officially as 'unallocated' or unused, so those bits of kit like Nuke Sentinel that rely on third party GEOIP information, may be wrong until the official lists are updated.
It would be well worth ensuring you are running the latest IP2C list from [ Only registered users can see links on this board! Get registered or login! ]

If you still have problems with the latest IP2C data imported, you may have to add the IP manually through NS admin.
 
View user's profile Send private message Send e-mail
slackervaara
Worker
Worker



Joined: Aug 26, 2007
Posts: 236

PostPosted: Fri May 16, 2008 10:32 pm Reply with quote

You can check in Sentinel by the function Search adresses, if those addresses are included in IP2Country that you have. If they not it will give invalid address and you need to update the IP2Country tables.


Last edited by slackervaara on Sun May 18, 2008 6:38 am; edited 1 time in total 
View user's profile Send private message
xGSTQ







PostPosted: Sat May 17, 2008 3:39 am Reply with quote

i just upgraded nuke sentinal to 2.17 and i updated all of the IP2Country's from the latest downloads at NSN

i just checked the first IP addy from one of my users and its showing this

Image

so im presuming from that result that all IPs in that range are blocked ?
 
Guardian2003







PostPosted: Sat May 17, 2008 4:11 am Reply with quote

The country flag is showing so this would indicate that the IP range is now known and will no longer produce the invalid ip message.
 
xGSTQ







PostPosted: Sat May 17, 2008 6:19 am Reply with quote

Thanks all for all your kind help.. very much appreciated indeed

Im a total retard when it comes to sentinel Smile
 
Guardian2003







PostPosted: Sat May 17, 2008 10:37 am Reply with quote

Any time Wink
 
xGSTQ







PostPosted: Sat May 17, 2008 10:52 am Reply with quote

What about this one, some one just mailed me saying there still blocked but there IP is different though.. strange this is he is one of my mods and has had access to the site for months... and is not an AOL user ... Sad

here is the screenie

Image
 
Guardian2003







PostPosted: Sat May 17, 2008 11:37 am Reply with quote

Hmm, and he says the error is the same "invalid IP" message?
 
xGSTQ







PostPosted: Sun May 18, 2008 1:24 am Reply with quote

Quote:
You have been blocked from entering this site.

You have attempted to improperly access the admin area of this site.

All of the following information has been gathered to assist the webmaster should this need to be reported to local or federal law enforcement.

If you think this is a mistake you can contact the site webmaster at admin(at)clan-themes(dot)co(dot)uk.
Be SURE to include the following information in any email!

User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)
Remote Address: 195.188.152.12
Client IP: none
Forwarded For: 92.236.68.147
Date Blocked: __TIMEDATE__
Block expires: __DATEEXPIRES__


well he reckons that it used to say invalid ip but since updating its now saying admin ban.

Daft thing is i have searched for his IP in the banned range and its not there, could it have banned someone else in the range and also prevented him access ?

sorry about this..
 
jakec







PostPosted: Sun May 18, 2008 1:47 am Reply with quote

Also check the .htaccess file.
 
Guardian2003







PostPosted: Sun May 18, 2008 2:32 am Reply with quote

Sounds like his admin cookie has expired and he accessed an admin link without logging into admin.
Run the 'scan for new admins' in NS admin to make sure you add his IP to the protected range.
If his IP is not in the blocked ip or blocked_range table and not in the htaccess (if you have 'write to htaccess' enabled then he should be able to access the site.
 
xGSTQ







PostPosted: Sun May 18, 2008 2:38 am Reply with quote

@ jakec i did check the .htaccess file and the IP wasn't in there

@ Guardian2003 sorry for the confusion, he wasn't admin just a forums moderator
 
Guardian2003







PostPosted: Sun May 18, 2008 3:27 am Reply with quote

The error message he got indicates he tried to access an admin function so he was blocked correctly. However, as his IP is not listed in the tables above or the htaccess file then he doesn't appear to 'banned'.
If he is getting this message say when visiting your homepage then that's a different problem Sad
 
Guardian2003







PostPosted: Sun May 18, 2008 3:29 am Reply with quote

Actually, to save arguments, you could us Nuke Sentinels 'Traccked IP' -> Tracked Users to find out exactly which url's he was accessing Wink
 
xGSTQ







PostPosted: Sun May 18, 2008 5:40 am Reply with quote

Guardian2003 wrote:
Actually, to save arguments, you could us Nuke Sentinels 'Traccked IP' -> Tracked Users to find out exactly which url's he was accessing Wink


Ah good idea ill check now
 
xGSTQ







PostPosted: Sun May 18, 2008 5:45 am Reply with quote

he only visited forums pages Sad

weird...
 
montego
Site Admin



Joined: Aug 29, 2004
Posts: 9457
Location: Arizona

PostPosted: Mon May 19, 2008 5:26 am Reply with quote

This is weird and I am not sure what is going on. Please check your proxy blocker settings and turn that off, and then check back with your UK AOL users. It is the only thing AOL related that I can think of ATM.

_________________
Where Do YOU Stand?
HTML Newsletter::ShortLinks::Mailer::Downloads and more... 
View user's profile Send private message Visit poster's website
xGSTQ







PostPosted: Mon May 19, 2008 6:58 am Reply with quote

proxy was at lite ive turned it off now, see if he can get on
 
Gremmie
Former Moderator in Good Standing



Joined: Apr 06, 2006
Posts: 2415
Location: Iowa, USA

PostPosted: Mon May 19, 2008 7:57 am Reply with quote

You can always just turn off that invalid IP address check if it is more trouble than it is worth for you.

_________________
GCalendar - An Event Calendar for PHP-Nuke
Member_Map - A Google Maps Nuke Module 
View user's profile Send private message
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel(tm)

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©