I've been using nuke sentinel for quite a while now (since the first time i got hacked, about 7 months ago), i've been using version 2.3.2 on nuke 7.4 and everything was runing great untill about a week ago when i started to get blocked out very often, then i noticed i was receiving tons of e-mails from sentinel with blocked IPs and some useres started complaining that they had been blocked also for no reason.
I decided to update my version of sentinel and got version 2.4.2 which i managed to install after a few runs to phpmyadmin unblocking my ip!
I have no idea what i should do and i really don't want to be without protection on my site!!!
Can anyone help me???
phpnuke-hosting Support Mod
Joined: Oct 19, 2004
Posts: 1032
Location: UK
Posted:
Sun Nov 13, 2005 3:27 am
What is the reason that sentinel is giving you for blocking your ip?
The reason presented by sentinel, not only for blocking my IP, but for every IP it's been blocking is Abuse-Script.
Also most times the user agent is mozilla (but it also blocks in IE because i've tried that) and the Request Method seems to always be GET.
What do you think? Should i disable script blocking?
Like i said before i don't want to be without protection on my site!
Thanx in advance for all your help!
Rurinho Nuke Cadet
Joined: Jul 21, 2005
Posts: 8
Posted:
Sun Nov 13, 2005 6:04 am
Analyzing the emails that sentinel has been sending I came up with something.
I've been using the IndyNews add-on to give my useres the ability to easily add images to their submitted articles. I've been using it ever since i started to use nuke and it has been working fine, although i did have to make some changes to the code to get installed on nuke 7.4.
Anyway, on most of the emails sent by sentinel i find that the Query String and Get String are related to indynews. For example:
I think that when the user goes to submit an article he gets blocked, but on the other hand it's blocking me for no reason! mostly i try to login, user or admin, and just get blocked.
One more thing that just occured to me, the last 5 submitted articles are shown on my homepage, indynews always puts the first image added by the user (if any) on the article shown on the homepage. Could it be that the GET occures when these images are trying to show?
Rurinho Nuke Cadet
Joined: Jul 21, 2005
Posts: 8
Posted:
Mon Nov 14, 2005 1:13 am
bump
Rurinho Nuke Cadet
Joined: Jul 21, 2005
Posts: 8
Posted:
Mon Nov 14, 2005 9:22 am
ANYONE?
Evaders99 Site Admin
Joined: Aug 17, 2003
Posts: 12383
Posted:
Mon Nov 14, 2005 12:24 pm
I'm not sure why Sentinel would block those, you may need to talk to the Senintel team
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
