Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™
Author Message
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Thu Sep 21, 2006 7:40 am Reply with quote

ive never seen this before.....
an admin from a site visits and gets kicked on the spot...
anyone can explain what happens here...


Date & Time: 2006-09-21
Blocked IP:
User ID: Anonymous (1)
Reason: Abuse-Harvest
String Match: indy library
--------------------
User Agent: Mozilla/3.0 (compatible; Indy Library)
Query String: Only registered users can see links on this board! Get registered or login!
Get String: Only registered users can see links on this board! Get registered or login!
Post String: Only registered users can see links on this board! Get registered or login!
Forwarded For: none
Client IP: none
Remote Address:
Remote Port: 1533
Request Method: HEAD


And the url is realy Only registered users can see links on this board! Get registered or login!
so where does the rest comes from and why the ban?
 
View user's profile Send private message
kguske
Site Admin


Joined: Jun 04, 2004
Posts: 6383

PostPosted: Thu Sep 21, 2006 11:38 am Reply with quote

Not sure, but the user agent triggered the block: Abuse-Harvest

_________________
I google, therefore I exist...
Only registered users can see links on this board! Get registered or login!
 
View user's profile Send private message
hitwalker
PostPosted: Thu Sep 21, 2006 2:16 pm Reply with quote

mmmm..,but it shows the url like /cgi-php/phpwrapper in the query,get,and post string..
Where does that comes from....
the site has pure normal stuff,just plain text...nothing more...
and what you mean with user agent triggered ?
 
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Thu Sep 21, 2006 6:13 pm Reply with quote

Hmmm could be something with the paths that Sentinel uses. Is your PHP compiled as a CGI module?

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
hitwalker
PostPosted: Thu Sep 21, 2006 6:21 pm Reply with quote

hi, no its not my site....
i was asked to helpwith some things,upgrading sentinel was one of the things....
but thing is,to me nothing happens...
but others that just drop in and use the language block get banned...

so could it be PHP compiled as a CGI module ?
But wouldnt that be weird?
I never read anything abywhere that such a config would ban people,not to mention the weird query,get,and post string url it shows ...
 
montego
Site Admin


Joined: Aug 29, 2004
Posts: 9457
Location: Arizona

PostPosted: Thu Sep 21, 2006 7:51 pm Reply with quote

If you look in NukeSentinel's Harvestor blocker, you will that user agent of "indy library" in there. Unban them and have them try a different browser. I wonder if there is some extension they are using which changes the user agent to this value???

_________________
Only registered users can see links on this board! Get registered or login!
Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
hitwalker
PostPosted: Thu Sep 21, 2006 8:03 pm Reply with quote

well thing is,i dont think they are so interested in all of this...
in situations like this,a script like sentinel gets the blame,but infact they dont know what its all about...
a few admin,or some important people should be able to get on the site,or administrate it whatever....
but they never seen something like sentinel...,so they mail a black banned screenshot asking what it is....
is it a plain?...no...is it a bird?......no....its sentinel.. !!!!
huh,whats that?
 
montego
PostPosted: Fri Sep 22, 2006 6:04 am Reply with quote

Well, I am trying to help you debug this. NukeSentinel is doing what it supposed to be doing. But, if you don't think this Indy Library is anything to be concerned with, you have two choices: turn off Harvestor Blocker or remove that line from the list of user agents.

If you want to try and figure out why a regular browser is causing the user agent to be this, then you might want to ask them about what I posted in my previous note.
 
hitwalker
PostPosted: Fri Sep 22, 2006 6:17 am Reply with quote

yes thanks, i already took it out and maild them to try a few things...
see how that goes....
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> NukeSentinel™

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©