PN 7.5 w/ NS 2.3.1 - No IP Written for Blocking

New Member Joined: Jul 09, 2005 Posts: 3

I installed the patch and Sentinel files. Everything works good as far as site functions are concerned. I tried to use a union attack and recieved the blocked page. I recieve the emails saying my IP was blocked.

So far so good.

Now, I try to access my site and I go right on in. I checked the IP-ban table through myPHPadmin and there is nothing written to the table. I checked the .htaccess and nothing is written there with the exception of the code for denying access to my .staccess. .htaccess is MODed to 666.

What could be wrong?

The same thing happened when I tried to access the admin via proxy and was given a blocked page. No record for the IP block. Plus, I had the block proxy setting at high as was able to browse the site like there was no protection.

Any ideas?

registered · Regular Joined: May 28, 2005 Posts: 90

in sentinel's configuration you have set these blockers to 'Email, Block, Default Page' ?

Posted: Sat Jul 09, 2005 1:29 pm

Yep and I do get the emails, the pages and all that. It just doesn't get recorded to the DB or written to .htaccess. It performs perfectly, other than that.

Posted: Sat Jul 09, 2005 3:00 pm

Are you protected either in one of the protected fields or admin protect?

PM me your domain and I'll reply with my IP address and then give you a non-malicious union attack to test it.

registered · Worker Joined: Oct 07, 2003 Posts: 211

mystik, try and remove ALL the blank lines in your .htaccess file. The only blank line should be at the very bottom. I had the same problem. Here's an example:

Change This:

Code:

# -------------------------------------------


# Start of NukeSentinel(tm) admin.php Auth


# -------------------------------------------


<Files .staccess>


deny from all


</Files>





<Files admin.php>


<Limit GET POST PUT>


require valid-user


</Limit>


AuthName "Restricted by NukeSentinel(tm)"


AuthType Basic


AuthUserFile /home/virtual/site4/fst/var/www/members/.staccess


</Files>


# -------------------------------------------


# End of NukeSentinel(tm) admin.php Auth


# -------------------------------------------

To This:

Code:

# -------------------------------------------


# Start of NukeSentinel(tm) admin.php Auth


# -------------------------------------------


<Files .staccess>


deny from all


</Files>


# <---------------------------  ADD THE "#" (Shift+3) HERE


<Files admin.php>


<Limit GET POST PUT>


require valid-user


</Limit>


AuthName "Restricted by NukeSentinel(tm)"


AuthType Basic


AuthUserFile /home/virtual/site4/fst/var/www/members/.staccess


</Files>


# -------------------------------------------


# End of NukeSentinel(tm) admin.php Auth


# -------------------------------------------

Do this to EVERY blank line in your .htaccess file. I had a bunch of them. That fixed it for me.

Posted: Sat Jul 09, 2005 7:45 pm

Actually, I deleted the tables using the script in Sentinel and then reinstalled as a new installment with the script. After that it worked like it should. I'm not sure why the tables wouldn't take the first time as they didn't look any different the second time around. Must be something with the SQL connection.

At any rate, it works great now. Thanks everyone!