Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™
Author Message
azism
Worker
Worker


Joined: Feb 02, 2005
Posts: 145
Location: Tucson, AZ

PostPosted: Fri Feb 04, 2005 7:29 pm Reply with quote

In the Configuration menu, when setting a blocker type on, there are a few settings I'd like opinions on.

IP Block Type: Which is the best setting? Complete IP or 1 octet?

Email IP lookup: What is the difference between ARIN.net and DNSSTUFF.com and which is the better choice? Or is it best to leave this off?

Write to htaccess: Why would I want to write to this file if the SQL table is recording the information?

I am new at using Sentinel, so I'd like to hear what you experienced users have found works best.

Thanks! Cheers

_________________
Webmaster
TI99ers On-Line User Group Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Send e-mail Visit poster's website
Raven
Site Admin/Owner


Joined: Aug 27, 2002
Posts: 17086

PostPosted: Sat Feb 05, 2005 8:28 am Reply with quote

I usually use 1 octet as that most often covers it, for me.

DNSSTUFF gives more thorough information. You can get it from Arin but you have to do it manually.

IP's blocked in .htaccess never make it to your site. It is blocked at the server level.
 
View user's profile Send private message
azism
PostPosted: Sat Feb 05, 2005 10:24 am Reply with quote

Thank you for the reply. Especially the part about .htaccess. I never would have known that. Now that I know it, I will activate that setting.

Also, I was thinking the 1 octet might be better, but wasn't certain. I will change mine there also.

Now, as to arin vs dnsstuff. As I understand what you stated, if I choose arin, I need to do the lookup manually? And with dnsstuff it does it automatically? I thought it would be the opposite. Interesting.

Thank you! Smile
 
azism
PostPosted: Sat Feb 05, 2005 11:09 am Reply with quote

I now have one additional question.

Is there any reason why NOT to set the Block Duration to Permanent??? Question
 
sixonetonoffun
Spouse Contemplates Divorce


Joined: Jan 02, 2003
Posts: 2496

PostPosted: Sat Feb 05, 2005 11:43 am Reply with quote

One reason time expiring becomes more vital is if you choose to block the entire IP range opposed to blocking the specific IP address. We really don't want to block all COX High speed users or all AOL users for ever. (Well maybe AOL wink*).

But yeah the number of attacks on my sites have never been hard to manage with a permanent setting.

_________________
[b][size=5]openSUSE 11.4-x86 | Linux 2.6.37.1-1.2desktop i686 | KDE: 4.6.41>=4.7 | XFCE 4.8 | AMD Athlon(tm) XP 3000+ | MSI K7N2 Delta-L | 3GB Black Diamond DDR
| GeForce 6200@433Mhz 512MB | Xorg 1.9.3 | NVIDIA 270.30[/size:2b8 
View user's profile Send private message
Raven
PostPosted: Sat Feb 05, 2005 11:59 am Reply with quote

They both look up the initial IP. However, some IP's have to have further assignments. DNSStuff drills on down. Arin does not.
 
azism
PostPosted: Sat Feb 05, 2005 2:33 pm Reply with quote

Thank you for the responses. Helps makes users like me more responsible users of Sentinel as we better understand the logic behind the settings.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©