My sentinel is not blocking the hacker.

New Member Joined: May 05, 2006 Posts: 5

Hello,

I already uploaded all files to my 7.9 PhPNuke. Did all alterations and installed the Sentinel.

All configuration is set. I put CGIAuth and at first time keeped asking a windows box for login and pwd. after editinf the .htaccess and generation of my admin "god" auth into .staccess, the box dissapear.

So i logged of from my site and try to reach the admin.php with wrong pwd and nothing happens, i did not been blocked and the windows box did not showed.

Can someone help me to find what i made wrong.

thx

Posted: Fri May 05, 2006 3:38 pm

What you are doing wrong is installing the wrong version of Nuke. If you want 7.9 Nuke that's your choice but you would be better off to get the 2.02 distribution of Nuke that was recently released on this site. There's good setup instructions with it and the people here will be much more able to help you. Sentinel even comes preinstalled and there are instructions for the HTTP_AUTH step too. You'll get the latest Forums too. If you are just starting out then this is absolutely the way to go.

Posted: Fri May 05, 2006 3:57 pm

fkelly wrote:

What you are doing wrong is installing the wrong version of Nuke. If you want 7.9 Nuke that's your choice but you would be better off to get the 2.02 distribution of Nuke that was recently released on this site. There's good setup instructions with it and the people here will be much more able to help you. Sentinel even comes preinstalled and there are instructions for the HTTP_AUTH step too. You'll get the latest Forums too. If you are just starting out then this is absolutely the way to go.

Thats the problem i am not starting now, i started with 7.6 and upgrade eventually to the newest version.

This way no one can help me?

thx

Posted: Sat May 06, 2006 7:03 am

Just because you upgrade to the newest doesn't mean you have the best. Versions above 7.6 have been well documented here and other places about the vulnerablilities of them. As fkelly stated, you may want to look at the distro available here to see if it would meet your needs. It would be much more secure than the version you are attempting to use at the moment since the chatserv patches and Nuke Sentinel are already installed. This version is well backed by a group of very knowledgeable people also should you encounter problems..... Smile

and it is updated continually.... Smile

Up to you...... Smile

Posted: Mon May 08, 2006 4:17 pm

Friends, i have it a long time, my nuke have more then 500 ppl registered.

I configured the sentinel using CGI, it works, the Windows BOX is now asking the pwd and confirming it.

thx

registered · Posted: Tue May 09, 2006 5:44 am

rberardo, thank you for letting us know AND good job in figuring it out!

Posted: Tue May 09, 2006 6:30 am

ow, Hi Montego... Thx.

How can i simulate a attack to put the vilan in the Shamefull list?

thx

Posted: Tue May 09, 2006 9:34 pm

Quote:

put the vilan in the Shamefull list

Sorry, but I do not understand what it is you are trying to do. This thread was about you setting up CGIAuth...

Posted: Wed May 10, 2006 8:54 am

Tell me if i did it right, friend.

Now, when i try to access any admin feature, a Windows Box appear and ask login and pwd. Then i type it and it work, if i type wrong pwd a page saying "access restrict only" appears. But no one is caught as a hacker.

How can i know if other features is working properly? i want to try hack my page to see if it will work.

Sorry to bother. =)