Help to check nukesentinel.php code

Hangin' Around Joined: Dec 06, 2004 Posts: 46

I just found out why Nuke Sentinel isn't writing the banned IP's to the databse, and is because I have some old code in my scripts. Since the datestamps of all files are of the same date, I don't know why, I'm wondering wich of these are the correct ones for the nuke_nsnst_blocked_ips table:

A) ip_addr, ip_long, user_id, , username, user_agent, date, notes, reason, query_string, get_string, post_string, x_forward_for, client_ip, remote_addr, remote_port, request_method, expires, c2c

OR...

B) banip, banlong, ban_user_id, ban_username, user_agent, ban_time, addby, blocker, querystring, getstring, poststring, posstring, forward_ip, client_ip, remote_addr, remote_port, request_method, abexpires, c2c

???

Thanks in advance! Regards,

Eduardo.

Edited to change the title for another one more catchy.

Posted: Sat Jan 13, 2007 4:35 am

I just need to know what does the latest most recent version says. You may check the table directly using phpMyAdmin or viewing the source code of your nukesentinel.php file located in your "includes" folder just after where it says:

Code:




$db->sql_query("INSERT INTO `".$prefix."_nsnst_blocked_ips` VALUES

Thanks for any help. Regards,

Eduardo.

Posted: Sat Jan 13, 2007 8:22 pm

Oh, hi superflash! I think is option "B", regards!

Posted: Sat Jan 13, 2007 8:23 pm

Thank you superflash! You made me recover my faith in humanity! I'll try with "B" changing all the files that point to that table fields, I hope you're right. Best regards!

Posted: Sat Jan 13, 2007 8:24 pm

I'm glad of being of help, good luck!

Posted: Sat Jan 13, 2007 9:30 pm

I give up! I can't make nukesentinel to work. I have to actually write the banned ip addresses manually into the database and .htaccess because it just send me the email, but doesn't record the ips. Sorry for all this monologue, but I feel better when I'm ranting and somebody is reading me.

registered · Posted: Mon Jan 15, 2007 10:58 pm

Well, maybe next time you will do a little reading yourself of our forum posting rules, especially the one about bumping of posts and what to expect regarding people's time around here.

RTM

http://www.ravenphpscripts.com/postt5986.html

If you want to know what the lastest files for NukeSentinel say, why not download the lastest from http://www.nukescripts.net and take a look? Wink

BTW, sounds like you have not changed your Blocker Configuration from "Email Only" to one of the other blocker types, such as "Email, Default Page, Block"...

Posted: Tue Jan 16, 2007 2:25 am

General rules of order and conduct wrote:

- We know that your question is the only question that matters ! But, when there are 10 new questions out there, then we have 10 priorities. We will get to all of them eventually, with few exceptions. Please don't start adding comments and posts to your original post with remarks like 'Anyone out there?', 'BUMP', 'I guess my question is not important', etc.

Ok, this is awkward Embarassed

I'm very sorry about that, it won't happen again.

I downloaded all the versions I could find here in the downloads sections, and there are big gaps between versions so I couldn't find where and when the files changed. I'll take a look at nukescripts.net to see what I can find there. I will also check the blocker configuration, I can't remember currently wich settings has. Thank you very much for your help.

Posted: Sun Jan 21, 2007 7:18 am

superflash, how did you make out on this issue? I would definitely always go to nukescripts.net for your NukeSentinel distributions. That is the author's site, so he will always have the complete set of downloads and the latest of everything.

Posted: Thu Jan 25, 2007 4:57 pm

I'm sorry I haven't answered before. I have problems connecting with my ISP to ravenphpscripts.com, ravenhosting.com, and nukescripts.net/com. It's not the first time my ISP, Prodigy, somehow block access to several sites, including these three. I'm sure it must be a technical problem with their firewalls or dns, I don't think they're doing this on purpose. The last time they have this problem was on 2005 and they fixed it several months later. This happen one week ago and I can't make them respond my mails and their phone support are of no help since they don't know a thing about this.

That's why I'm writing through a web proxy server, I hope there's no problem posting this, but I had to answer because I didn't want you to think I didn't care or something.

As for the problem, I followed your advices and I fix several things, but I haven't finished yet. For example: in the view blocked ip's menu, the list is empty, although the database does contain several entries. But now the system IS blocking, that's more important.

Thank you very much for your help, I really appreciate it.

Regards,

Eduardo.

registered · Posted: Fri Jan 26, 2007 12:35 am

May need to talk to Raven with your IP, see if you're being blocked

Posted: Fri Jan 26, 2007 10:06 pm

Hi evaders! Thank you for answering. That last time, about 2 years ago, I did asked Raven via email and he answered me that he had not blocked my IP. So I dismissed that this time. I\'m sure the problem is with my ISP, but is curious that the 3 last times this happened, these 3 domains where affected. I already spoke with the tech support and they can\'t access from their computers either, and they are about 160 miles from here in other city. This doesn\'t affect other ISP in the area: for example, I asked a friend that has cable and she could see this site without any problems.

Right now I\'m using www.lightproxy.com to write this message, I\'m happy that the proxy isn\'t being blocked.

Best regards!

Posted: Sat Jan 27, 2007 12:32 am

Can you do a traceroute to any of those sites?

In Windows command line, it is "tracert" command

Posted: Sat Jan 27, 2007 3:47 am

Hi Evaders, thank you for answering. I did a traceroute and this are the results:

I also use other tools:

Code:




Target: ravenphpscripts.com


Date: 27/01/2007 (Saturday), 01:40:42 a.m.


Nodes: 17








Node Data


Node Net Reg IP Address      Location            Node Name


   1   -   - 172.16.1.34     32.000N, 115.000W   EDUARDO


   2   1   - 172.16.0.1      Unknown             


   3   2   1 201.130.163.1   Unknown             basmxl3.telnor.net


   4   3   1 200.76.240.33   Unknown             red-corp-200.76.240.33.telnor.net


   5   3   1 200.76.240.65   Unknown             red-corp-200.76.240.65.telnor.net


   6   3   1 200.76.250.36   Unknown             red-corp-200.76.250.36.telnor.net


   7   4   2 160.81.142.165  Anaheim             sl-gw23-ana-3-0.sprintlink.net


   8   5   2 144.232.1.153   Anaheim             sl-bb23-ana-12-1.sprintlink.net


   9   5   2 144.232.1.185   Anaheim             sl-bb21-ana-10-0.sprintlink.net


  10   5   2 144.232.20.67   Unknown             sl-st20-la-13-0.sprintlink.net


  11   6   3 208.50.13.1     Los Angeles         so1-2-0-2488m.ar1.lax2.gblx.net


  12   7   3 67.17.68.234    Atlanta             so1-0-0-9953m.ar4.atl1.gblx.net


  13   8   3 206.41.25.230   Atlanta             nlayer-communications-inc.ge-4-1-0.410.ar4.atl1.gblx.net


  14   9   - 209.51.131.29   Unknown             


  15   9   - 209.51.149.109  Unknown             


  16   9   4 209.51.137.26   Unknown             gnax-atl-tescom-wan-client.gnax.net


  17   9   5 207.210.70.117  Unknown             ravenphpscripts.com








Packet Data


Node High Low  Avg  Tot  Lost


   1    0    0    0    1    0


   2    2    2    2    1    0


   3   23   23   23    1    0


   4   30   30   30    1    0


   5   26   26   26    1    0


   6   30   30   30    1    0


   7   28   28   28    1    0


   8   36   36   36    1    0


   9   29   29   29    1    0


  10   29   29   29    1    0


  11   39   39   39    1    0


  12   90   90   90    1    0


  13  201  201  201    1    0


  14   86   86   86    1    0


  15   89   89   89    1    0


  16   89   89   89    1    0


  17 ---- ---- ----    2    2

I don\\\'t know how to interpret these results, what do they mean? Thank you for your time!

Best regards,

Eduardo.

Posted: Sun Jan 28, 2007 12:46 am

Weird you get mixed results. The first says its stops on the trace at 209.51.137.26
The other says it makes it all the way to ravenphpscripts.com

Posted: Tue Feb 06, 2007 10:04 pm

After contacting several times with my ISP's customer support, finally they fixed the problem and again I have access to these sites.