Topic: Forum Firewall 1.0.x Official Support Thread

[muad]

Hello butchas,

Tried to install, and apart file given by official smf mods has no extension .zip (minor problem), I'm receiving this warning with one theme in special;
====
   Argentum2
      Execute Modification    /usr./Themes/argentum_enhanced_smf20final/index.template.php    Test failed
      1.    Replace    /usr./Themes/argentum_enhanced_smf20final/index.template.php    Test failed
====
What consecuences would I expect by installing ignoring this warning?
Should I make some editing/copying/whatever to solve it before (or after) installing?

Thanks in advance.

[butchas]

Either another mod is conflicting or you are not using the default theme.

Try uninstalling other mods and arrange your mod order.

If you have a custom theme then try a manual installation.

[muad]

No mods, just a custom theme (not mine, Bloc's).
Will try manual for this theme.
Thanks again.

====
UPDATE:

The little thing that failed (described before) was just the insertion of FFCopyright(),

[muad]

Two additional questions (maybe 3);

- What is the right position of robots.txt? (my forum is in www/forum)

- What is the syntax for countries? I mean, if you want to block (for example) France and Germany I must type FR|DE in that box?

- If I enable IP validation, I (admin) got blocked when I'm in office (because firewall receive my "local" ip 172.XX.XX.XX even I'm behind a proxy)... How can I solve this (apart disabling IP validation)?

Thanks again 4 your work.

[butchas]

- What is the right position of robots.txt? (my forum is in www/forum)

www

- What is the syntax for countries? I mean, if you want to block (for example) France and Germany I must type FR|DE in that box?

Yes - but please note that this features does not work with all hosts.

- If I enable IP validation, I (admin) got blocked when I'm in office (because firewall receive my "local" ip 172.XX.XX.XX even I'm behind a proxy)... How can I solve this (apart disabling IP validation)?

Not much you can do but, create and access the website with a lesser global moderator account that has  a secure password.  Do you really need full admin access at work?  Spend too much time on the computer can get you in trouble.

[butchas]

Well...  I have been working "with some great effort" on a mostly php (server side) version 2.0 of the mod.  There is some java script (client side) but honestly in my opinion .js is too easy to hack to be a valid anti-spam tool. If your host does his job then you should be safe with php!

This version is to have some improvements,  But the major addition would be a caputa for members who failed the ip test:  Who were victims of a bad proxy.  I completed a extremely ruff draft working version of the test but have a few more months before I am ready for beta testing...

Attached is an image of the alpha test,

Simple as it seems it is actually extremely complicated.  Incorporates in part some ideas from this link and some of my most devious anti caputa and anti-spam ideas to date.

The visitor has a time limit and a character limit and must enter a reason for access... Then the visitor will select the correct image.  Only to be drug through the most intense anti-spam tests I can dream of.  I will not divulge the tests at this point but trust me they will be state of the art!
 

Give it some thought but in another month or two I will be looking for beta testers.

Any thoughts or ideas will be appreciated...

[butchas]

Working with forms is much more difficult than I thought.  For this type of mod I will need to cover the bases.  Now I understand why httpBL leaks.  The way that mod handles forms leave so much room compromise.  Plus I found even more vulnerabilities in SMF.   That said, making secure form is going to take me a tad longer than expected.   I will need to do some more testing before I go to beta.

[bigguy]

Have the leaks in SMF been reported.

[butchas]

The leaks are in another mod and what I see in SMF is a waste of time to report.

[bigguy]

Ah ok I didn't know it was in another mod.

[Godsongz]

What's up?  The modifications section of simplemachines.org lists Forum Firewall as last being updated Today[/color] at 04:03:01 PM, but it's still at version 1.1.5 which I've had installed for weeks.  Was there a change too small for a version?

[butchas]

No change.
 

[JMB]

Hi,


I've just installed Forum Firewall 1.15 on an SMF 2.0.2 board. Whenever I click on Forum Firewall in the admin menu I get a 404 error. The URL is:


http://mydomain.com/index.php?action=admin;area=forumfirewall;sa=settings.


Any ideas?


Thanks in advance,


JMB