[Alfa1]

Does BB submit to ProjectHoneypot? If a bad bot hits my site, then will it be submitted to the database? Or do we need to install additional software to join the honeypot network?

Nominated.


The bots artabus and deepnet explorer are still registering accounts. Can I submit these bots somewhere? Or can I block them with BB?

[Lee G]

If you go into the bad behaviour folder, look for the blacklist.inc.php file
Open it with wordpad or your prefered editor
There are two sections there for banning user agents, first part is begins with user agents
Second part is, if found anywhere user agents

Ban anywhere user agents are after this code

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Add the following to the found anywhere section

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

This mod is so easy to work with on banning or blocking bad user agents
I found this mod cured a problem I have with banning user agents via htaccess

To test if the ban works. Go to Bots vrs Browsers and check on this page
http://www.botsvsbrowsers.com/SimulateUserAgent.asp

Add the user agents anywhere in the test string and try to view your forum

[Eric]

Originally Posted by error10

Sorry to do this to you Eric, but I just pushed an important update that you'll want to put out as soon as possible.

Ah, no probs. I just got home from work, and will be heading to dinner - but I'll update the mod in the next couple hours.

Originally Posted by Lee G

Nominated for mod of the month

I love using the earlier version of Bad Behaviour.
This version has just made my day on fighting scrapers and spam bots

Thanks very much for releasing this

Thanks for the nomination Lee

Originally Posted by Alfa1

Does BB submit to ProjectHoneypot? If a bad bot hits my site, then will it be submitted to the database? Or do we need to install additional software to join the honeypot network?

Nominated.


The bots artabus and deepnet explorer are still registering accounts. Can I submit these bots somewhere? Or can I block them with BB?

Thanks for the nomination as well Alfa1 As for ProjectHoneyBot - as far as I'm aware, it does not submit to the project, only checks against the black list - but I'll see what I can do about that.

And thanks to Lee for posting the code for adding those bots, that should work for you.

[Eric]

Version 1.0.1, 04/06/2011
- Bad Behavior upgraded to 2.1.12
- Changed files:
o /includes/bad-behavior/core.inc.php
o /includes/bad-behavior/searchengine.inc.php
- "Verbose" admin option now set to "No" by default.


I've reached the max. number of attachments for this thread - so I'll have to move the screenshots elsewhere. I will do this soon.

[Alfa1]

There seems to be a problem. After running this for 18 hours I have about 8.000 log entries. I do have an active site. A quick glance shows at least 50 valid members were repeatedly blocked from logging in. So there must be many more guests that have been blocked. About 98% of my users are not logged in.
There were 30% less posts today than normal. This could be a coincidence, but we do not normally get this much deviation.

Im getting the first support tickets in. Im not sure if it is related, but I do have vbadvanced installed. One member mentioned that he was able to log in from forum home, but not from the vbadvanced portal.

I have temporarily turned BB off until this issue is resolved. Please let me know if you need any information or if I can do anything to fix it.

[Eric]

Originally Posted by Alfa1

There seems to be a problem. After running this for 18 hours I have about 8.000 log entries. I do have an active site. A quick glance shows at least 50 valid members were repeatedly blocked from logging in. So there must be many more guests that have been blocked. About 98% of my users are not logged in.
There were 30% less posts today than normal. This could be a coincidence, but we do not normally get this much deviation.

Im getting the first support tickets in. Im not sure if it is related, but I do have vbadvanced installed. One member mentioned that he was able to log in from forum home, but not from the vbadvanced portal.

I have temporarily turned BB off until this issue is resolved. Please let me know if you need any information or if I can do anything to fix it.

In the logs, you're able to click on the "Key" to see the reason for them being blocked. So if you could let me know what it's showing as the reason, and the URL(s) they were blocked on, I'll take a look. As for vBAdvanced, it's not a product I use personally, but what version are you using?

[Alfa1]

About 50 members causing there instances:

HTTP Response: 403
Explanation: You do not have permission to access this server. Data may not be posted from offsite forms.
Log Message: Referer did not point to a form on this site

/forum/login.php?do=login
My website has various urls and runs both http as https.

1 member causing these instances:

HTTP Response: 403
Explanation: You do not have permission to access this server. This may be caused by a malfunctioning proxy server or browser privacy software.
Log Message: A User-Agent is required but none was provided.

These are donation / subscription payments that are blocked.
The url for this one relates to my payment module and contains variables relating to payment information.

I did not find logs relating to /index.php or other vbadvanced pages, except for malicious bots hitting it.
Im running vbadvanced 3.2

[Eric]

Originally Posted by Alfa1

About 50 members causing there instances:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

/forum/login.php?do=login

1 member causing these instances:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

These are donation / subscription payments that are blocked.
The url for this one relates to my payment module and contains variables relating to payment information.

I did not find logs relating to /index.php or other vbadvanced pages, except for malicious bots hitting it.
Im running vbadvanced 3.2

So for the first one... vBAdvanced posting from / to /forum/login.php seems to be triggering BB as being an "offsite form". Let me look into that.

On the second one, would you mind showing me the header information? (If you'd PM it to me, and remove any type of private information).

[Eric]

Ok, on the first one, given vB's form tokens, you should be able to edit /includes/functions_vb_badbehavior.php and set "offsite_forms" to true in the $bb2_settings_defaults array.

[Alfa1]

Sent by PM.

[Hornstar]

I will watch this one, however I too don't want legit users blocked, so I will see how you go first alfa

[Eric]

After discussing the issue via PM with Alfa1, I have a few ideas for some changes that I'll implement in the next release. For now, if you use this mod, especially if using vBAdvanced or other portals that will allow a user to login from it, edit /includes/vb_badbehavior.php and set 'offsite_forms' to true in the $bb2_settings_defaults array.

I'm going to work right now, so I'll post more once I get home.

[Eric]

Screenshots can now be seen at: http://www.secondversion.com/images/vb_badbehavior/

I was running out of room for attachments here on vB.org - Also, to lower the size of the download... removed the screenshots from the zip files.

[thenetbox]

Things seem to work so far Thanks!

When I enter the http:BL API Key, the entire forum goes blank though. White screen, no error.

[thenetbox]

Is there a way to whitelist a few IP addresses or user agents?

Thanks again.