Banned by Nuke Sentinel after Upgrade to 2.20.01

Worker Joined: May 26, 2006 Posts: 153

Ok have updated RN to latest version 2.20.01 from 2.10.01 all went Ok and got into admin. Updated NukeSentinel with upgrade script in RN Installer OK. Imported latest IP to Country tables IP2Country_2008-02-03.tgz all seemed ok but then got following NukeSentinel message.

You have been blocked from entering this site.

You have attempted an unknown attack on this site.

All of the following information has been gathered to assist the webmaster should this need to be reported to local or federal law enforcement.

If you think this is a mistake you can contact the site webmaster at ******

Be SURE to include the following information in any email!
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12
Query String:
GET String:
POST String:
Referer: none
Request Method: GET
Remote Address: 62.***.**.**
Client IP: none
Forwarded For: none
Date Blocked: 2008-03-16 @ 19:04:55 GMT GMT +0000
Block expires: Permanent

Have checked all the .htaccess files and the IP address hasn't been written to the file. Also no sign of the IP address in the nuke_banned_ip table

Have also got an sql error in the rnloggs as follows.
SQL was: SELECT * FROM nuke_mail_config
remote addr: 62.***.**.**
Table '****.nuke_mail_config' doesn't exist

Not sure where to look now.

John
Embarassed

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Well, if your IP is not in either of those tables then you're really not banned. What url were you trying to access when you got this message?

Concerning the nuke_mail_config' doesn't exist message, can you get to admin.php? If so, just click on the TegoNuke Mailer icon/link within the administration control panel and then it should go away. If you can't get to the panel, then use phpMyAdmin and create the table with this code:

Code:

CREATE TABLE `nuke_mail_config` (


  `active` tinyint(1) NOT NULL default '0',


  `mailer` tinyint(1) NOT NULL default '1',


  `smtp_host` varchar(255) NOT NULL default '',


  `smtp_helo` varchar(255) NOT NULL default '',


  `smtp_port` int(10) NOT NULL default '25',


  `smtp_auth` tinyint(1) NOT NULL default '0',


  `smtp_uname` varchar(255) NOT NULL default '',


  `smtp_passw` varchar(255) NOT NULL default '',


  `sendmail_path` varchar(255) NOT NULL default '/usr/sbin/sendmail',


  `qmail_path` varchar(255) NOT NULL default '/var/qmail/bin/sendmail',


  PRIMARY KEY  (`mailer`),


  UNIQUE KEY `mailer` (`mailer`)


) TYPE=MyISAM;





INSERT INTO `nuke_mail_config` VALUES(0, 1, 'smtp.tusitio.com', 'smtp.tusitio.com', 25, 0, 'tu@tusitio.com', 'tupassword', '/usr/sbin/sendmail', '/var/qmail/bin/sendmail');

Posted: Mon Mar 17, 2008 1:05 am

Hi Raven,

Will try to sort out the missing table tonight.

The URL is to the admin section of the site. This is a website in a sub-directory of the main site. I have used this URL before the RN upgrade and also since without problem.

This seems to have started since upgrading the nukesentinel Country tables. Could it be a corrupt nukesentinel. Have just checked again with new IP address and still banned, will try from work today as well.

Ok have tried from work and still banned. I can get into the website (in sub-directory) but because I have used Nukesentinel to turn off the site in settings all I see is the Nukesentinel site closed for maintenance screen, I can't get any further to see if all is Ok still.

John

Posted: Mon Mar 17, 2008 4:58 pm

Raven wrote:

Well, if your IP is not in either of those tables then you're really not banned. What url were you trying to access when you got this message?

Concerning the nuke_mail_config' doesn't exist message, can you get to admin.php? If so, just click on the TegoNuke Mailer icon/link within the administration control panel and then it should go away. If you can't get to the panel, then use phpMyAdmin and create the table with this code:

Ok have sorted out the missing table and dblog looks cleaner now. But still locked out of site and no sign of IP addresses being written into nuke banned tables.

The URL is http://www.brzjc.zenjudo.co.uk/admin.php if I go to www.brzjc.co.uk I get the Nuke Sentinel closed for maintenance screen which is correct.

How should I go about getting access to the site again.

John

Posted: Mon Mar 17, 2008 5:09 pm

John,

There's no way for me to debug this w/o having access to your site. I will need:

site url, admin id/pass
Nuke Sentinel id/pass
phpMyAdmin access url, id/pass

Email to raven AT ravenphpscripts DOT com

registered · Posted: Mon Mar 17, 2008 8:08 pm

j4rdin, I just noticed your client IP address is blank. Could it be that you are behind an internet security software on your PC that is anonymizing you to some degree?

Posted: Tue Mar 18, 2008 1:37 am

montego wrote:

j4rdin, I just noticed your client IP address is blank. Could it be that you are behind an internet security software on your PC that is anonymizing you to some degree?

Hi Montego,

I get the same screen from work with no client IP address in the banned screen produced by NukeSentinel as well. I can still get in to my main website in the root directory of the site which hasn't yet been upgraded at www.zenjudo.co.uk/admin.php

It looks like Sentinel is just stopping anyone from entering the www.brzjc.co.uk admin area at www.brzjc.zenjudo.co.uk/admin.php , possibly because the Sentinel install has a corrupt file or database table. I think I might have to delete the Nuke Sentinel files and tables and reinstall again. Raven I will have a look again tonight if i get time and if I hit another brick wall will email details to you.

Thanks

John

Posted: Tue Mar 18, 2008 4:52 am

No, that is ok, if Raven is helping you, there is nothing that I could possibly do. He's the best! I had seen the no client IP before so thought I'd mention it. However, I do see that you have a Remote address, so just scratch my previous thoughts. lol.

Posted: Tue Mar 18, 2008 4:44 pm

John,

I have replied by email also. I have no problems administering your site. If you haven't already, try deleting your cookies and refreshing your cache.

Posted: Fri Mar 21, 2008 12:47 pm

Raven wrote:

John,

I have replied by email also. I have no problems administering your site. If you haven't already, try deleting your cookies and refreshing your cache.

Thanks for the help Raven,

Eventually I ended up clearing the Nuke Sentinel tables and reinstalling just Nuke Sentinel with the RN installer. That let me back into the site again, I can get access to the admin log-in now, just need to sort out the .htaccess log-in, its not working at present.

Also still have to update the Nuke Sentinel country code tables again to latest issue. So not quite out of the woods yet.

*** UPDATE ***

Have just uploaded the most recent IP2Country_2008-02-03 files onto the website from within NukeSentinel admin page. Looks like the tables problem has been sorted and all look Ok now.

John Razz

Posted: Fri Mar 21, 2008 1:04 pm

Thanks for the update!