Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Proxy Alert Details »
Proxy Alert
Mod Version: 1.9.3, by TheInsaneManiac (Coder/Designer) TheInsaneManiac is offline
Developer Last Online: Jul 2021 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (19 votes - 4.21 average) Installs: 101
Released: 27 Jun 2013 Last Update: 18 Jan 2015 Downloads: 607
Supported Uses Plugins Auto-Template Additional Files External Content  



FORMALLY KNOWN AS TOR ALERT! PROXY ALERT TAKES CONTROL OF YOUR FORUMS WITH THE NEXT LEVEL OF PROTECTION! 3.8 VERSION HERE.

I've searched high and low for a modification that can detect Tor or proxy users. Personally I've had one too many banned members just create another identity and troll about. Now let proxies and TOR... Give you problems NO MOR! Now when those pesky proxy and Tor users visit your site, you can block them and redirect them to a custom error message!

You can also alert your members that proxies and Tor is not a nice thing to use! You can customize the message and it also allows to be closed.

Demo:
http://www.consolediscussions.com/forum/
*You will need to register as I have it set to detect for members only.


Features:
Thread Posting on Detection [PRO]
IP Address Whitelist [PRO]
Redirect Proxy Registrations to Blank Page [PRO]
Detect Web Proxies [PRO]
Email on Detect [PRO]
Index Only Option [PRO]
Usergroup Permissions [PRO]
*Search Engine Safe
Block Proxy Registrations (Registration Blocking Only Option Available)
Detect Lan Proxies
PM on Detect
Enable/Disable
Automatic or Manual Template Edits
Persistent Message Enable/Disable (Uses Cookies)
Redirect if Detected
Custom Messages
Customer Color of Messages
UserID Permissions
Block Registration Even When Proxy Disabled


No Branding Version:
For a premium no-branding version which has additional features, please visit my Products & Services page.

If you look forward to seeing this modification progress, you can help by donating! Donators will be given access to early releases before anyone else, and access to the 3.8 version pro when it's released as well. Upcoming features include:
Option to remove X on alert
Not allowing Tor users to post
Redirect to another page
Usergroup Permissions
Set a certain amount of views before blocking
Once closed, don't persist with displaying box
Possibly a notice type message instead of a popup
BAN Tor users automatically
Enable/Disable feature


Installing:
1.) Upload everything in the upload folder to your forum root.
2.) Navigate to AdminCP Add/Import Product
3.) Select product-toralert.xml
4.) Install the modification
5.) Set your options in the AdminCP
6.) Mark Installed


Upgrading:
1.) Upload everything in the upload folder to your forum root.
2.) Navigate to AdminCP Add/Import Product
3.) Select product-toralert.xml
4.) Check yes to Allow Overwrite
5.) Install the modification
6.) Set your options in the AdminCP


*Not working?
1.) Disable automatic template edits in the AdminCP
2.) Navigate to the navbar template in your style
3.) Add {vb:raw toralert} to the bottom of the template


Changelog
1.9.2
Fixed issue with broken bracket.

1.9
Fix for 4.2.2
AdminCP Manager
Pro Feature Ported to Free (Block Registration Even When Proxy Disabled)


1.8
Registration Detection Only
Added Link to Change Registration Detection Message
Fixed Issue w/ Registration Detection
Reduced Queries Further


1.7.5
Fixed "Could not find phrase 'proxy_alert_registration'." Error
Improved Detection
Reduced Queries
Enhanced Code


1.7
Thread Posting on Detection [PRO]
Added Member Only Detection
Added Global Enable/Disable
Restructured Code
Optimized Code


1.6
User ID Whitelist
Bot detection fix
IP Whitelist [PRO]
Registration blocker works with ip address whitelist [PRO]


1.5
Block Proxy Registrations (Screenshots Added)
Redirect Proxy Registrations to Blank Page [PRO]
Block Registration Even When Proxy Disabled [PRO]


1.4
-Updates
Changed IP text to Real IP
Changed pm alerts to be more detailed if it was detected using tor, a lan proxy, or a web proxy.


1.3
Fixed conditional issue


1.2
-Updates
PM on detect now posts the ip address, proxy ip address, and the hostname of the user

-Bugs
Fixed multiple PMs being sent


1.1
-Updates
Renamed to Proxy Alert
Detect Tor and Lan Proxies
PM on Detect
Detect Web Proxies [PRO]
Email on Detect [PRO]
Redirect to Blank Page [PRO]

-Bugs
Fixed cache issue
Fixed font issue


1.0
-Updates
Enable/Disable
Automatic template edits Enable/Disable
Font color of messages
Index only option [PRO]

-Bugs
Fixed cache issue in tor.php
Fixed online location still showing unknown for redirects


0.6.5
Added a persistent option in the AdminCP
Minor bug fixes


0.6.0
Alert message when closed will not pop back up (Stores tor cooking and if exists alert will not pop up any longer, this does not apply to redirection)

Changed the position of the alert to not cause issues with the Adblock Alert product


0.5.0
Block Tor users and redirect them to a custom page with a custom message controlled in the AdminCP

Enable/Disable redirection in AdminCP.

Who's online trigger


0.1.0
Release.

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	TorAlert1.png
Views:	979
Size:	32.4 KB
ID:	145622   Click image for larger version

Name:	TorBlock.png
Views:	857
Size:	35.0 KB
ID:	145624   Click image for larger version

Name:	Proxy Detector PM.jpg
Views:	518
Size:	46.7 KB
ID:	146118   Click image for larger version

Name:	AdminCP.jpg
Views:	445
Size:	137.4 KB
ID:	146120  

Click image for larger version

Name:	Registration.jpg
Views:	392
Size:	27.2 KB
ID:	146174   Click image for larger version

Name:	AdminCP Manager.jpg
Views:	178
Size:	5.0 KB
ID:	147518  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Last Reply Alert: Add last reply alert under new reply button calorie vBulletin 3.6 Add-ons 29 02 Mar 2011 00:27

  #316  
Old 23 Mar 2016, 02:17
TheInsaneManiac TheInsaneManiac is offline
 
Join Date: Feb 2008
Are you using the pro version? Need to figure out which to troubleshoot.

Last edited by TheInsaneManiac; 23 Mar 2016 at 02:59.
Reply With Quote
  #317  
Old 23 Mar 2016, 02:19
edgeless edgeless is offline
 
Join Date: Mar 2013
Originally Posted by TheInsaneManiac View Post
Are you using the pro version? Need to figure out which to troubleshoot.
Never mind... you were too fast for me . I cleared the cookies and it's now working
Reply With Quote
  #318  
Old 25 Mar 2016, 15:18
edgeless edgeless is offline
 
Join Date: Mar 2013
Okay, it does work... but I'm encountering a few problems. And one of them is a fairly serious one.

I'll start with the most serious problem. There is no combination of settings that I have been able to find which will allow registration from what I fear may be many mobile devices. For testing I'm using my own cell phone. The test is to try and use it to register as a new member on my forum site. Prior to each test, I freshly clear its cookies and other private data. The problem is that PApro persistently interprets these efforts as proxy connections and blocks me at the registration page. This happens even with the Tor, LAN, and Web Proxy options set to "no" and the Members option set to "yes". And it doesn't matter if the Registration Only option is set to "yes" or "no". The vB message with the text that I entered for the proxy_alert_registration phrase consistently appears and blocks every registration attempt from this cell phone.

I have a theory about this issue, but at the moment I have no way to test it. My theory is this: The IPs assigned to my phone (its service is through Consumer Cellular) do not have rDNS hosts. That is, none of the dhcp IPs leased to my cell phone can be reverse-resolved to host names (i.e., there are no PTR records for them). If PApro uses rDNS lookup as a criterion to approve each IP as being a non-proxy address, then this may be why these IPs are not passing. But as I've said, I have no immediate way of testing this theory, since I only have the one cell phone. I could have some of my members or staff test this theory with their mobile devices by clearing their cookies and then attempting registration. But that tends to become a bit awkward so I'm holding off for now. And of course users who contact admin due to a registration refusal are usually not the best options as test subjects.

The next matter of concern is that my testing has shown that for some reason when the Registration Only option is set to "yes", my registration attempts through Tor will randomly slip through to my forum's registration form. And this is with confirmation that my Tor exit node IP has NOT changed each time it happens. Again, this issue does seem to only occur when the Registration Only option is set to "yes". I haven't been able to duplicate it with that option set to "no"... at least yet.

My last observation is trivial... but I'll still mention it. It is that even when I have the Location option set to "no" while the Registration Only option is set to "no" as well, the PA popup message seems to only appear on the main forum index page. Isn't the Location option being set to "no" supposed to cause this popup message to appear on all pages? This is obviously not a serious problem. It's only an observation at this point.

Thanks for reading... if anyone has any thoughts I'll sure be interested.


EDIT:
I had one of my staff test the reg process using their mobile device - it acquires IP addresses which will in fact properly resolve to host names. Like my mobile IPs, hers are as well managed by AT&T Mobility; they are just different numerical blocks. She was able to get through the registration process without issue. I think that serves as fairly good evidence that the lack of PTR records for the IP blocks that my phone has access to has been responsible for PApro rejecting the registration efforts from my phone. The 2nd issue, intermittent slip throughs on Tor connections, may require some further testing on my part.

EDIT2:
Okay. I've done some more testing on the second issue. As mentioned, when the Registration Only option is set to "no", all Tor connections are blocked and the "proxy connections are not allowed" message is consistently presented as expected - i.e., registration does not occur and the proxy_alert_registration message is displayed. However, when the Registration Only option is set to "yes", the system will randomly fail to display the proxy_alert_registration phrase and instead moves to the next stage, which is the new member information entry form page. But when this happens, once the member information has been entered and the 'Complete Registration' button has been clicked, no registration occurs -which is good- but the vB message which then appears is not about proxies at all... instead it is: "Your email is marked as spam." Below is a screenshot.

Doing a search for phrases, the above message phrase is shown to be the contents of email_mark_as_spam. I'm unsure though why this message phrase is triggered by PApro ? So that's my first question. And my next question is why, when the Registration Only option is set to "yes", do Tor connections randomly alternate between allowing the user to reach the member information entry form stage (followed by display of the email_mark_as_spam message), or terminating immediately after the birth date is entered with a prompt display of the proxy_alert_registration message? The important thing of course is that this mod seems to block Tor users. It just doesn't do the same thing each time if the Registration Only Option is set to "yes". At least that's what I'm finding.

Any ideas as to why I'm noticing this behavior?
Reply With Quote
  #319  
Old 25 Mar 2016, 15:27
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #320  
Old 25 Mar 2016, 21:13
edgeless edgeless is offline
 
Join Date: Mar 2013
Originally Posted by Dave View Post
Regarding the problem with your phone, does this also happen when you switch from data to WiFi? A lot of providers nowadays do a lot of magic by passing it through a proxy on their own server that optimizes images/JavaScript/CSS files and add all kind of headers.
I'm not sure. I don't have a wifi-equipped router here and there are no wifi access points near enough to me to try. But I have contacted AT&T IP Support who handle their DNS servers and they have confirmed that the PTR records are missing from the IP ranges that my phone has access to. They emailed me that they have submitted a request to the team who administers the mobile ip DNS servers to add the PTR records for the affected ip blocks. They said the problem should be corrected by sometime next week. Once it is fixed (if in fact that occurs), I will test it with my phone and report back here.
Reply With Quote
  #321  
Old 30 Mar 2016, 03:12
edgeless edgeless is offline
 
Join Date: Mar 2013
AT&T came through and added the PTR records. The two /24 IP blocks that my phone's IPs come from all resolve to host names now. But unfortunately that wasn't the problem. What was, and is the problem is the fact that the only APN available to my phone through its current provider goes through a proxy. So the public IPs that it's given by the dhcp server are in fact proxy IPs. Which, of course, means that my phone being detected by PA as using proxy connections is accurate. I believe there are some comments about mobile carriers using proxy IPs earlier in this thread.

Question: Does the IP Whitelist provision in PApro allow the use of CIDR or wildcards? I'm hoping I don't have to individually allow each IP.
Reply With Quote
  #322  
Old 30 Mar 2016, 18:48
edgeless edgeless is offline
 
Join Date: Mar 2013
Originally Posted by Marv View Post
Whitelisting is nice - but heck, I canīt go through 8.000 dynamic IPīs each day and add them one by one to the list. Esp. nearly every mobile carrier uses proxies, where the half is beeing detected false as TOR-users. As I had the mod activated my mailbox turned into pandoras box with complaints over complaints.

Unless there is no data-service which handles & checks (!) the ipīs and ip-ranges for proxies, I wouldnīt recommend to use this on boards with >500 members.
This is exactly the problem! The system falsely detects certain mobile carrier proxy IPs as Tor exit nodes. Therefore, you can't turn off these false detections without turning off Tor detection altogether. Personally, I could get by if there were a way to whitelist IP ranges. But it appears that there isn't. It's really a shame because this system has tremendous potential. But as it stands, auto blocking the registration efforts of legitimate potential members stands to discourage them from ever trying to register again. This problem really needs to be worked out in order to make this an outstandingly useful and dependable add-on.

It also seems difficult to get the developer to address these concerns for some reason
Reply With Quote
  #323  
Old 26 Jul 2016, 23:54
TopFloorDjs's Avatar
TopFloorDjs TopFloorDjs is offline
 
Join Date: Sep 2008
Real name: Brad
im getting an error:


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Reply With Quote
  #324  
Old 27 Jul 2016, 21:39
rhody401's Avatar
rhody401 rhody401 is offline
 
Join Date: Feb 2012
From the error you posted, it looks like perhaps the files were not all uploaded to your server. (the includes sub folder, etc)

Double check that, perhaps?
Reply With Quote
  #325  
Old 27 Jul 2016, 21:53
TopFloorDjs's Avatar
TopFloorDjs TopFloorDjs is offline
 
Join Date: Sep 2008
Real name: Brad
When i first read your comment i thought "how stupid does this guy think i am"...

I re-uploaded all the files and the modification works :| Thanks.

Originally Posted by rhody401 View Post
From the error you posted, it looks like perhaps the files were not all uploaded to your server. (the includes sub folder, etc)

Double check that, perhaps?
Reply With Quote
  #326  
Old 27 Jul 2016, 23:44
MarkFL's Avatar
MarkFL MarkFL is offline
 
Join Date: Feb 2014
Real name: Mark
The developer should click the "Additional Files" option then, to make it more clear that files need to be uploaded to the server.
__________________
Former vBulletin.org Staff Member



Support for my products (as well as updates/new product publishing) has been moved to MHB - vBulletin Products and TAZ - Add-ons
Reply With Quote
  #327  
Old 28 Jul 2016, 00:21
TopFloorDjs's Avatar
TopFloorDjs TopFloorDjs is offline
 
Join Date: Sep 2008
Real name: Brad
I know I know... egg on my face. (shamed)
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 05:28.

Layout Options | Width: Wide Color: