Work Place / Companies being banned ??

Client Joined: Dec 04, 2004 Posts: 757

Hi all, I have just found out that many visitors who try to access my site from the work place / company seem to get blocked by sentinal????
I was in the bank last week and I was chatting to a guy who looked at my site and found his PC blocked it also??

Why is it companies have a problem accessing the site???? I guess they have higher security measures, my non ravenuke sites don't get this problem..
I quite often also get emails from people asking why they got blocked as they were only trying to access a sub page through google also.
Is there anything I can do to help this but still maintaining a good level of security?

I am in the UK.

Cheers all
mrix

registered · Posted: Fri Jan 29, 2010 7:12 am

What is the block that is occurring?

My guess is it is either "Invalid IP" which there is a work-around for OR it may be related to the Proxy blocker, which I think we can turn off? (You'll have to check as I haven't messed with NS in a long time.)

Posted: Fri Jan 29, 2010 7:20 am

yes if you have proxy blocker turned on, try it off (I have run it that way for years), there are alot of legitimate proxies on the net.

Posted: Fri Jan 29, 2010 7:25 am

Hi there I have block proxies on Lite Setting.
I have also Dos protection setting as on.

Looking through the error in the email this is the type of thing that they get...

Be SURE to include the following information in any email!
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Remote Address: 83.140.213.123
Client IP: none
Forwarded For: none
Date Blocked: 2009-09-03 @ 18:13:15 UTC GMT +0000
Block expires: Permanent

Posted: Fri Jan 29, 2010 7:48 am

is there a part of the message that displays the reason for the block?

Posted: Fri Jan 29, 2010 7:54 am

Hi there, I have looked through varius email where people have contacted me and they only send what I already posted.. here is another..

Be SURE to include the following information in any email!
User Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.17) Gecko/2009122116 Firefox/3.0.17 GTB6 (.NET CLR 3.5.30729) FBSMTWB
Remote Address: 216.182.141.23
Client IP: none
Forwarded For: none
Date Blocked: 2010-01-02 @ 15:46:02 UTC GMT +0000
Block expires: Permanent

Posted: Fri Jan 29, 2010 8:11 am

We need to know what the top of the message says to be able to narrow it down. Other than just shooting in the dark.

Posted: Fri Jan 29, 2010 8:12 am

Ok normally this is the only bit they send Sad

I`ll take another look to see if I can find a email with something more detailed.
Cheers
mrix

Posted: Fri Jan 29, 2010 8:26 am

Found 1 here where a guy said he found the link through the search engine and instantly got blocked...

You have been blocked from entering this site.

You have attempted to improperly access the admin area of this site.

All of the following information has been gathered to assist the webmaster should this need to be reported to local or federal law enforcement.

If you think this is a mistake you can contact the site webmaster at mrix(at)sea-fishing(dot)org.

Be SURE to include the following information in any email!
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0. Cool

Gecko/2009032609 Firefox/3.0.8
Remote Address: 213.173.144.65
Client IP: none
Forwarded For: 10.47.112.253
Date Blocked: __TIMEDATE__
Block expires: __DATEEXPIRES__

Actually a member here tried to help me out with some other issue I had a couple of days ago and he said he got blocked.
Cheers
mrix

Posted: Fri Jan 29, 2010 8:29 am

This is a copy of the post I made a few days ago where a member got blocked..

mrix wrote:
At present to you see where I have placed the Google ads here....

http://www.sea-fishing.org/forum-3.html

Basically that page if my south coast fishing page and instead of the Google ade, my idea is to replace it with a company advertisement just for that sub forum.

Cheers
mrix
p.s I have posted in the Hire forum for help but no joy

Ah. Sentinel

Quote:
You have been blocked from entering this site.

You have attempted to improperly access the admin area of this site.

All of the following information has been gathered to assist the webmaster should this need to be reported to local or federal law enforcement.

If you think this is a mistake you can contact the site webmaster at mrix(at)sea-fishing(dot)org.

Be SURE to include the following information in any email!
User Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)
Remote Address: 62.6.183.238
Client IP: none
Forwarded For: 10.30.200.10
Date Blocked: __TIMEDATE__
Block expires: __DATEEXPIRES__
PLEASE: bear in mind that even if you have done nothing wrong, you may be getting this page due to someone's misuse of the site in your ip range

Posted: Fri Jan 29, 2010 9:46 am

try
Block Proxies: Off

registered · Posted: Fri Jan 29, 2010 11:36 am

Also change your NS settings to send you an email if someone is blocked. You will be able to see the link they used that caused them to be banned. Check you robots.txt to make sure the admin links are being bypassed by search engines.

Posted: Fri Jan 29, 2010 11:42 am

Hi there my .txt is this...

User-agent: *
Crawl-delay: 5
Disallow: /abuse/
Disallow: /admin/
Disallow: /blocks/
Disallow: /cgi-bin/
Disallow: /db/
Disallow: /images/
Disallow: /includes/
Disallow: /language/
Disallow: /modules/
Disallow: /ShortLinks/
Disallow: /themes/
Disallow: /admin.php
Disallow: /config.php

I am not sure how / where to add the email notification if someone gets blocked?

thanks for your help
mrix

Posted: Fri Jan 29, 2010 1:42 pm

You can set email notification under Blocker Configuration in NS. Just click the type of blocker you want to set email notification on from the menu on the right side after you have clicked Blocker Configuration.

Posted: Fri Jan 29, 2010 1:47 pm

Great cheers.
mrix

Posted: Sat Jan 30, 2010 7:16 am

mrix, for the users that are getting this block:

Quote:

You have attempted to improperly access the admin area of this site.

Are they legitimate admins?

Regarding the following:

Quote:

mrix wrote:
At present to you see where I have placed the Google ads here....

http://www.sea-fishing.org/forum-3.html

Basically that page if my south coast fishing page and instead of the Google ade, my idea is to replace it with a company advertisement just for that sub forum.

Cheers
mrix
p.s I have posted in the Hire forum for help but no joy

Where had you posted that? You might want to check your Referrer blocker to see if a part of that domain is in any of the strings there?

As Palbin has stated, we really need to know exactly which blocker is being fired on these things. I think you've got multiple separate issues going on here and we're going to go around in circles trying to narrow in on each.

Posted: Sat Jan 30, 2010 7:43 am

Hi there the topic where I a member here got banned for accessing the sub forum of my site is here...
http://www.ravenphpscripts.com/postt18642.html

scroll down a little as its AndyB reply.

As for legit admins I am not sure as I just get emails from time to time where people say they just get blocked for just entering the site though a sub page etc

Cheers and thanks for the help
mrix

p.s I`ll check the Referrer blocker

Posted: Sat Jan 30, 2010 7:49 am

mrix, AndyB didn't get blocked from just clicking that link... I don't think anyways. Were you able to find his block in NukeSentinel? You should check these to see what/how folks are getting blocked. I clicked that link and no block.