-
Please take a moment to look over the Suggestions & Feedback rules before making a post: READ RULES HERE
How is the Firewall Script working out?
- Thread starter Ic3m4n
- Start date
trophaeum
Senior Member
- Dec 21, 2007
- 852
- 717
you mean the fact that if someone puts the keyword s*y*s*t*e*m in a post or 1 of a hundred other things it likes to block the post? or that it doesnt play properly with suhosin and keeps blocking people randomly for nulls in their raw cookie data? i could go on but im stopping for now, its still in early versions but personally this is not the place i would put a defense line up, get a better codebase and lockdown the server properly
i do think it can work for some people when setup right but i think for vb on here its a pita... time and new versions will tell i guess though
i do think it can work for some people when setup right but i think for vb on here its a pita... time and new versions will tell i guess though
foxler
Regular Member
- Mar 7, 2008
- 279
- 163
I would recommend something thats better built. I would suggest looking into modsecurity which has to be installed on the server itself but does a way better job
Essential Clix
Supreme Member
- Jul 30, 2007
- 1,407
- 3,165
Yeah, trust me firewallscript is just one line of defense. Trophaeum has taken the proper steps to setup the "proper" security 
Nothing's perfect, of course, but I think Troph's done a damn fine job.
Nothing's perfect, of course, but I think Troph's done a damn fine job.
trophaeum
Senior Member
- Dec 21, 2007
- 852
- 717
btw, mod_security is VERY flawed, it does NOT process the post data etc in the same way as each scripting language, it really is a BAD solution, i refuse to install it on any server, its just a bad joke and EATS resources, stay away, far far away
trophaeum
Senior Member
- Dec 21, 2007
- 852
- 717
please pm me any errors that you get with it under normal use, we are trying to set it 'right' (at this point personally i want to take to it with a whacking stick and disable it though but thats just me)
jaeden
BANNED
- Jun 3, 2008
- 232
- 28
okay heres the deal with the firewall script the way i see it. I have done some research and I think you guys should uninstall it. It's going to cause more headaches than good (which its already doing). The likelihood that the firewall script will prevent an attack is minimal. the best defense you have is keeping the forum and server software up to date.
Some days ago when i first questioned the firewall script i did a little digging around on this site and discovered that the forum code was out of date and there were people trying to develope an exploit for a bug (which turned out to be nothing big but still).
You guys don't need the firewall script. What you need to do is check for updates to vbulletin and vbul addons you have installed on a daily basis. Also, you need to edit your forum code to not display the vbulletin version info. This is a horrible thing. In fact, a good security measure would have been for you to remove any and all bannering info from the beginning.
As it stands right now... Lets say a major security hole comes out... You can use google to search for phrases in sourcecode. Go ahead right now and right click this page, view the source, and you will see in the html head: vBulletin 3.7.1 .
If an exploit were to come out right now for vbulletin and was left unpatched for more than an hour there is a good chance you would have a very serious problem on your hands.
Heres a good fix for that.. Connect to the forum FTP and download the entire site to a folder. Use the program "advanced find and replace" to find any instance of the phrase "vBulletin 3.7.1" and replace with the phrase "BHW Forum."
You should also find and replace the same term in the mysql database (can be done from with phpmyadmin). Do this each time you upgrade the forum and you will be much better off.
Also, you have a forum thread for php and other server side programming.. Use it to your advantage. Even if a vulnerability gets released that there isnt an official patch for yet, we could come up with quick patches for you. Its really not hard.
Some days ago when i first questioned the firewall script i did a little digging around on this site and discovered that the forum code was out of date and there were people trying to develope an exploit for a bug (which turned out to be nothing big but still).
You guys don't need the firewall script. What you need to do is check for updates to vbulletin and vbul addons you have installed on a daily basis. Also, you need to edit your forum code to not display the vbulletin version info. This is a horrible thing. In fact, a good security measure would have been for you to remove any and all bannering info from the beginning.
As it stands right now... Lets say a major security hole comes out... You can use google to search for phrases in sourcecode. Go ahead right now and right click this page, view the source, and you will see in the html head: vBulletin 3.7.1 .
If an exploit were to come out right now for vbulletin and was left unpatched for more than an hour there is a good chance you would have a very serious problem on your hands.
Heres a good fix for that.. Connect to the forum FTP and download the entire site to a folder. Use the program "advanced find and replace" to find any instance of the phrase "vBulletin 3.7.1" and replace with the phrase "BHW Forum."
You should also find and replace the same term in the mysql database (can be done from with phpmyadmin). Do this each time you upgrade the forum and you will be much better off.
Also, you have a forum thread for php and other server side programming.. Use it to your advantage. Even if a vulnerability gets released that there isnt an official patch for yet, we could come up with quick patches for you. Its really not hard.
trophaeum
Senior Member
- Dec 21, 2007
- 852
- 717
another day im treated like a n00b yet again *sigh* the forum is dave's, dave bought firewall script, its his choice what we do with it, he wanted to see if we could work with it, it was doing ok however now its going downhill more and more by the day so it is likely to get nuked over the next few days
im gonna walk away from this thread now before i say something that i may regret
artswerdstone
Power Member
- Nov 24, 2007
- 570
- 816
Thanks for this bit of information. I had been struggling to find which of my words impeded my post of being published.
It would be great to have a lest of forbidden words to let us avoid them and save us of a lot of headache.
MaestroDelWeb
Power Member
- Nov 5, 2007
- 745
- 1,073
I've been banned from this site a few times by the firewall script. I'll randomly read threads than all of a sudden I'll get a firewall error and have to leave for a few hours until I"m logged out. I'm being banned without even posting and using my regular internet connection, no proxies or anything shady.
Essential Clix
Supreme Member
- Jul 30, 2007
- 1,407
- 3,165
Are you sure it's the FireWallScript that's banning you? What kind of error message are you getting?
MaestroDelWeb
Power Member
- Nov 5, 2007
- 745
- 1,073
I'm definitely sure. I got the message a few hours ago when I was online earlier. It said something like, "You've been blocked by the Firewall Script," or something like that. I guess next time it happens I'll copy it and paste it next time I get access. I've never had a problem posting at all due to the script (although I have read the complaints). The error message mentions it's because of the script though. I'll make sure I save the message and post it next time I see it.
MaestroDelWeb
Power Member
- Nov 5, 2007
- 745
- 1,073
I just got blocked 2 minutes ago. I figured out, all I have to do is, clear my cookies and I'm allowed back in. This happened while I was viewing, not posting.
I guess it won't let me post the error code (I'm given a firewall error message). I've attached it here in a text file.
I guess it won't let me post the error code (I'm given a firewall error message). I've attached it here in a text file.