Topic: Forum Firewall

[bigguy]

Can we start a new thread over at SMFH. I can't move from one forum to another sadly.

[packman]

I've just installed FF and it looks very useful 


One thing that would possibly make it easier for new users to start using it is if each individual block of tests could be turned on/off independently. For example, I would feel reasonably happy enabling tests like SQL Injection very quickly, but might want to delay turning on the DOS Attacks until I'd confirmed what is causing them.


Is this an option that could be added?


Only one other question...how do I clear the visitor logs out when they get too big?

[butchas]

Please note that I just uploaded the update today.

You should enable your tests but do not turn block on until after you tested it for several days.  This is to make sure you do not block yourself and visitors.  Click on the ? for help.

DOS attacks are caused by bots that are hitting the site too fast and taking away your bandwidth.  If you want to make sure that bots are bad you need to set your robots.txt, Google webmaster info and other sites (there is a post earlier in this site about that).  There is a mod called Optimus Prime(sp) that makes it easier for newbies.

I like the Ip address test myself.

The visitor log trims it's self every 7 days.

[packman]

Sorry, I probably didn't make myself as clear as I could have done. What I'd like to do is turn on the SQL Injection (and maybe others) for blocking but still having the DOS attack test logging without blocking. At the moment it's all or nothing...until I'm happy with all the tests I want to turn on I can't turn any on because there's no way to test the others independently.


Thanks for the info about the logs. I'm already on v1.06.

[butchas]

Sure.  Each option category can be ran individually.  Go for it.

I will be relocating this support thread to SMF Helper.  It is more appropriate. 

[packman]

Sure.  Each option category can be ran individually.  Go for it.

How would I do that? There only seems to be one 'blocking' option for all tests?

[butchas]

Oh, you are correct.  Please note:

• When blocking is checked the selected tests will block the user the duration of the cache.
• If logging is also checked the event will be logged.
• Cache is required for the DOS test.
• If you are not using the dos test you can turn off cache (set to 0) and the user will get blocked one (1) time and then can get back on the site.

About the only thing you can do is wait until you get some free time and turn on logging and turn off blocking and perform tests while watching the log in the admin panel and the user online traffic.  You can also load up a second browser to test by visiting the site as a guest.

[packman]

OK thanks.

[butchas]

Support has been moved to SMF Helper.