Jamit Software Forum

Jamit Job Board Customers => Plugins => Topic started by: Peter on May 20, 2010, 11:16:07 pm



Title: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on May 20, 2010, 11:16:07 pm
I am pleased to announce that TRAFFIC COP 3.0 is out!

This plugin was formerly known as 'Traffic Filter'.

TRAFFIC COP 3.0 is a major release, featuring new functions, enhancements (functional and GUI), as well as bug fixes. Please see the attached screenshots.

TRAFFIC COP is now available at http://market.jamit.com/ (http://market.jamit.com/) .

Please give me your comments. If you need any assistance, you may post your inquiries here.


ABOUT:

Blocking undesirable (malicious and non-malicious) traffic will improve security and server performance!

"WOULDN'T YOU WANT A COP TO WATCH OVER YOUR SITE?"

Traffic Cop (formerly known as 'Traffic Filter') analyzes every single HTTP request and will deny access according to user-defined criteria (rules). Criteria for denial can be  either country, user-agent, IP address (single IP, IP range or CIDR), host name and usage of proxy. Denial rules can be negated by whitelisted rules.
 
Traffic Cop gives you control over your site. It can be used to improve  security and performance; prevent theft by data harvesting robots; block robots which  scan your site for backdoors and vulnerabilities; block undesired visitors; limit access to your site to one (or more) country; divert visitors according to predefined criteria to other sites etc.

Blocking undesirable traffic is very useful for any site and especially for sites with heavy traffic load. Using Traffic Cop will ease the load on your server and make it perform faster for desirable visitors.

... read more at http://market.jamit.com/ (http://market.jamit.com/)

2010-05-30 .... v 3.45, verified to work with JJB 3.6.0  ;)
2010-09-11 .... v 4.00 .... MAJOR RELEASE, many improvements, functional additions and bug fixes! It is obvious that the earlier versions (especially Traffic Filter) had some major problems. I hope you are not using Traffic Filter anymore. Traffic Cop is much better.
2010-11-30 .... v 4.32


Title: Re: TRAFFIC COP
Post by: whitecollarjobsite on May 27, 2010, 11:48:44 pm
Peter what is the deal with Traffic Cop not being able to install the database it needs to run?? I have tried to change permissions all the way back to the file to install the database and it will not install. This is more than a little frustrating for a plugin that is paid for.


Title: Re: database won't install
Post by: Peter on May 28, 2010, 12:13:44 am
Peter what is the deal with Traffic Cop not being able to install the database it needs to run?? I have tried to change permissions all the way back to the file to install the database and it will not install. This is more than a little frustrating for a plugin that is paid for.

Please give me the version of TRAFFIC COP you are trying to install.

Also, I need the exact wording of the error message you are seeing on your screen.

PLEASE make sure that you are installing the LATEST version, which is 3.43 (released just an hour ago). Follow the instructions in the README.txt as well as the system prompts during installation (like what to do and where to click).

Let me know how it goes.

Thanks,
Peter

P.S.
Changing permissions is not required when installing Traffic Cop. You should change them back to what they were.


Title: Re: TRAFFIC COP
Post by: Amjad on May 28, 2010, 01:07:31 pm
Peter,is the latest V. of Traffic COP compatible with 3.6 JJB?


Title: Re: database won't install
Post by: whitecollarjobsite on May 29, 2010, 12:45:34 am

PLEASE make sure that you are installing the LATEST version, which is 3.43 (released just an hour ago). Follow the instructions in the README.txt as well as the system prompts during installation (like what to do and where to click).

So just so I understand this, you want me to go and spend another 2 credits to get an update for software that didn't install because it was not up to date to work with the new job board update??? I have nothing against making a buck but when it isn't working and you are updating this over and over again, why shuold your consumer have to keep paying for your errors? I just downloaded version 3.3 and paid 2 credits for it 2 days ago! Errors I am getting are 403 errors even when everything is set to wide open to let the software update with no barriers right down to the php file to install the database. I did read the README and even printed it out whille I was installing to make sure I was doing this install by the exact directions. There was no problem with the software install, the error is when adding the IP checking database from the config GUI in the plugins screen.

Here is my email address, [email protected] perhaps in the interest of good business practice you might consider doing the right thing and send the updated version that does work with the new updated job board software. Seeing that the version I used credits for to acquire was only posted on 5/26/10 the same day I downloaded the software. If you are updating the software you should be sending the updates to the existing customers, especially if they just purchased the software or at least offering a spot to download without having to pay again.


Title: Re: database won't install
Post by: Peter on May 29, 2010, 02:01:55 am
....So just so I understand this, you want me to go and spend another 2 credits to get an update for software that didn't install because it was not up to date to work with the new job board update??? I have nothing against making a buck but when it isn't working and you are updating this over and over again, why shuold your consumer have to keep paying for your errors? I just downloaded version 3.3 and paid 2 credits for it 2 days ago!.... If you are updating the software you should be sending the updates to the existing customers, especially if they just purchased the software or at least offering a spot to download without having to pay again.

Hi Linda,

As long as you purchased the plugin, you can come back to the Jamit Market site and download the newest version for free. No need to pay. I hope that this is fair enough.

Rest assured that I want to help you resolve any problems you are experiencing.

This is what I understand is happening in your system:
  • You install the Traffic Cop on your server according to instructions.
  • When you were in the Job Board Admin control panel, you clicked on the 'Configure' button of the Traffic Cop. You saw a red colored prompt that says "IP2nation database is not installed.". So you clicked the link "Install IP2nation database". A window pops up with a progress bar and in a few seconds the database installation is completed. You closed the pop-up window. Then you refreshed the page by clicking on the link "Refresh Page".

The above is the installation procedure. I wrote it here because you mentioned earlier that you "were unable to install the database".

However, reading your most recent message, I see that you may be having some kind of other problem. It is not clear to me what the problem is. Any information regarding the problem (if you could provide) would be very helpful. For example, what version of Job Board are you using, etc.?

  • What kind of control panel for your hosting are you using? cPanel, Plesk, etc.?
  • Did you create your custom .htaccess file? At any rate, I would like to see the content of this file.
  • Are you able to access the Admin control panel of Job Board?
  • Upon clicking on the 'Configure' button of the TRAFFIC COP, can you see the 'Home" page of TRAFFIC COP? (Home page is the main control panel of Traffic Cop.) Do you see any warning messages?
  • Can you access the 'Diagnostics' page of TRAFFIC COP? What error messages do you see, if any?
  • Any other information will be helpful.

Thank you very much and sorry about the trouble.

Peter


Title: Plugin updates are FREE
Post by: Peter on May 29, 2010, 06:09:45 am
It seems that there is misunderstanding of how the Market (plugin sales and updates) works.

Referring to the official Jamit rules, once a user purchases a plugin, he can come back anytime and download an updated version of the same plugin for FREE.

It is important that you always download and install (and periodically update to) the most recent versions of plugins because they may contain bug fixes and other improvements.


Title: v 3.45 compatible with JJB 3.6
Post by: Peter on May 30, 2010, 09:36:02 pm
Peter,is the latest V. of Traffic COP compatible with 3.6 JJB?

Linda, Amjad and all that might have experienced some problems:

My apologies!!!  :-[

I have finally installed the latest version of JJB 3.6 and tried installing TRAFFIC COP. Yes, I have confirmed the problem that Linda was having and I have fixed it!

TRAFFIC COP v 3.45 now installs and runs on JJB 3.6 without hiccups.

Therefore, everyone concerned should always download and install the latest version of TRAFFIC COP (now version 3.45) from the Market. Please update!

Keep in mind that I strive for continuous improvement and will be posting updated versions on regular basis. I recommend that you again update to newest version as soon as they become available. (Lately it has been every 1-2days.)

Thanks for using TRAFFIC COP!
Peter


Title: Re: TRAFFIC COP
Post by: screenmates on May 31, 2010, 05:02:36 am
Hi Peter,

How about notifying others after you upload the updated version each time?


Title: Re: TRAFFIC COP
Post by: Peter on May 31, 2010, 07:26:14 am
...How about notifying others after you upload the updated version each time?

That's exactly what I have done this time. However, I don't have everyone's contact on my list, nor I want to use my energy on sending emails.

The Market may have that capability to notify users automatically. You need to ask Adam to enable it.


Title: Re: TRAFFIC COP
Post by: screenmates on May 31, 2010, 10:41:47 pm
Yes, ideally the market should offer the feature of sending out notifications to all those who already bought the plugin. For now, you could just maintain one read-only thread (others cannot post to it) and keep posting to it whenever you upload an update.


Title: Re: TRAFFIC COP
Post by: screenmates on May 31, 2010, 10:45:10 pm
There is a poll created as for this on the top of this thread:

http://forum.jamit.com/index.php?topic=474.0

Please vote...


Title: Re: TRAFFIC COP
Post by: Peter on June 01, 2010, 06:11:06 am
....For now, you could just maintain one read-only thread (others cannot post to it) and keep posting to it whenever you upload an update.

One step ahead of you! I have already been doing just that. Take a close look at this message (bottom part): http://forum.jamit.com/index.php?topic=464.msg1242#msg1242 (http://forum.jamit.com/index.php?topic=464.msg1242#msg1242)  ;D


Title: Re: TRAFFIC COP
Post by: whitecollarjobsite on June 01, 2010, 11:47:51 pm
Latest version 3.47 installing and working wonderfully!  ;D Stopped my idiot hacker cold an hour after installing it (I checked the report to see if there was any activity around this jerks usual time)

thank you thank you thank you thank you Peter!!!!


Title: Re: TRAFFIC COP
Post by: Peter on June 02, 2010, 12:52:46 am
Latest version 3.47 installing and working wonderfully!  ;D Stopped my idiot hacker cold an hour after installing it (I checked the report to see if there was any activity around this jerks usual time)

thank you thank you thank you thank you Peter!!!!

I am very happy to hear that! And thanks for the feedback!


Title: Re: Plugin update notifications
Post by: Peter on June 09, 2010, 01:01:45 am
...Yes, ideally the market should offer the feature of sending out notifications to all those who already bought the plugin. For now, you could just maintain one read-only thread (others cannot post to it) and keep posting to it whenever you upload an update.

This is what one could try: The RSS feed from market. http://market.jamit.com/rss.php?cat=93 (http://market.jamit.com/rss.php?cat=93)

If a plugin was updated, the date will be recent and the plugin will be on top of the list.


Title: Re: TRAFFIC COP
Post by: whitecollarjobsite on June 09, 2010, 01:58:21 am
very good idea! now if I will watch my RSS feeder............ :P


Title: Traffic cop and Google spider
Post by: lee on July 24, 2010, 12:23:02 am
Hi does anyone know if traffic cop will affect google spiders from crawling the site

Regards lee


Title: Re: Traffic cop and Google spider
Post by: Peter on July 24, 2010, 05:46:51 am
It will not affect Googlebot spider.

If you wanted to block Googlebot, you would have to set up a deny rule.

Traffic Cop is highly configurable.


Title: Re: Traffic cop and Google spider
Post by: lee on July 24, 2010, 11:13:54 am
Cheers Peter for that

Regards lee


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: lee on July 27, 2010, 03:18:11 pm
Hi Peter having trouble with the crawlers index my page, simulators are returning 0 results now im not sure if its traffic cop causing the problem because sometimes i receive Error 403 (Forbidden), But the reason i dont want to turn Traffic cop is the last time i did i had to reload traffic cop from scratch for some reason

Regards lee


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on July 28, 2010, 02:28:30 am
....having trouble with the crawlers index my page, simulators are returning 0 results ..... because sometimes i receive Error 403 (Forbidden)..... i dont want to turn Traffic cop is the last time i did i had to reload traffic cop from scratch.....

Sorry, but I don't understand your message. Can you explain more clearly what is going on? What kind of trouble exactly? What kind of "crawlers"? How do you know and how did you verify that?

1.) What version of Traffic Cop are you using? You need to use the latest version. Today it's v 3.58.
2.) Please give me the complete Traffic Cop configuration that you are using (it's called "Deny Rules"). Just post it here in your reply.
3.) Also give me the other settings, including Default Denial Action, Whitelisted Countries etc.

Traffic Cop is 100% configurable. For example, if Traffic Cop uses no Deny Rules, then nothing will be blocked (denied), not even search engine spiders.

So, if search engine spiders are being denied access, it is because of the settings you are using.

Simulators? -- What is that?

Are you simulating a "crawler" (robot)? If yes, you better make sure that you are simulating the robot correctly.

AGAIN, the TRAFFIC COP will record each denial event in the log. If anything is being denied (blocked), it will be visible in the log. If a real robot was denied (blocked), you would see it in the log.

My conclusion (impression) is that you are worried about a problem that doesn't exist!


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: lee on July 28, 2010, 10:47:51 am
Peter how you doing mate, traffic cop is set up as standard config, CONFIGURATION_PLEASE_READ file is copied and pasted into the  Deny Rules (Blacklist),

 I have nothing in the fields below

Whitelisted IP Addresses (Optional)
Whitelisted Hosts (Optional)
4 Whitelisted User-Agents (Optional)

Traffic Cop Version using 3.58
JJB v 3.5.6


Now we have used a few different spider-bot simulators they have returned a 403 (Forbidden), they maybe using a proxy so we tried white-listing their IP and Host same response, we then deleted the white-listings and Flushed the denial logs.

I have 40-50 other url`s which are not monitored by traffic cop and all of these are indexed by google but none from the jamit board, then last night we decided to turn traffic cop of over night to see what response we get, Jamit was indexed in google Categories/ job listings etc the whole lot, so obviously the Spiders are being blocked

Can you elaborate on these instructions Peter

Whitelisted User-Agents (Optional)

Specified User-Agents will not be denied.

Put each entry on a new line.

You must use preg_match-style regular expression with delimiters. Examples: /Googlebot/i, /^My\ secret\ browser$/, or #Mozilla/5\.0#.

Also is the a way to disable it everytime we do we have to reload ip2nation.sql file

Look forward to your reply

Lee


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on July 28, 2010, 11:48:26 am
....Now we have used a few different spider-bot simulators they have returned a 403 (Forbidden), they maybe using a proxy so we tried white-listing their IP and Host same response, we then deleted the white-listings and Flushed the denial logs.....

OBVIOUSLY, the spider-bot simulators you are using are not any good. If they were good, you would not see any error 403 (Forbidden), because there is no deny rule which would block Googlebot, MSN, Yahoocrawl ....!

.....I have 40-50 other url`s which are not monitored by traffic cop and all of these are indexed by google but none from the jamit board, then last night we decided to turn traffic cop of over night to see what response we get, Jamit was indexed in google Categories/ job listings etc the whole lot, so obviously the Spiders are being blocked .....

Googlebot and most other normal bots (MSN, Yahoocrawl) are NOT being blocked (using the suggested configuration). If they were, you would find a record of the blocked (denied) event in the deny log. This is the whole purpose for the LOG. Everything is being logged, so you know what the plugin is doing.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on July 28, 2010, 11:53:27 am
.....Also is the a way to disable it everytime we do we have to reload ip2nation.sql file....

To temporarily disable (= toggle ON/OFF) the traffic management function of Traffic Cop, go to:

Preferences -> Settings -> Traffic Management (select the radio button Enabled/Disabled, and click save!)

You don't need to delete/reload the ip2nation database each time you want to toggle the traffic management function. The database table needs to be installed only during the plugin installation (enable in Jamit plugin panel), OR reloaded if you are updating the database table with new one.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on July 28, 2010, 01:20:43 pm
.....
Can you elaborate on these instructions Peter

Whitelisted User-Agents (Optional)

Specified User-Agents will not be denied.

Put each entry on a new line.

You must use preg_match-style regular expression with delimiters. Examples: /Googlebot/i, /^My\ secret\ browser$/, or #Mozilla/5\.0#.

.........

Which instruction don't you understand?

TRAFFIC COP is made to be 100% configurable. It has the option to have many, many settings. A typical user will only use Deny Rules in section 1.1 (Blacklist).

When managing traffic (if enabled), Traffic Cop uses blacklist rules and whitelist rules. If a condition specified in the blacklist is true, an associated denial action will be executed. A blacklisted condition can be negated by a whitelisted condition (in most cases).

What is a User-Agent? http://en.wikipedia.org/wiki/User_agent (http://en.wikipedia.org/wiki/User_agent)
You need to keep in mind that User-Agent string can be forged. You cannot rely on it for security!!!

For example, the robot from Google, also called Googlebot, uses a User-Agent string such as:
Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)

The PROBLEM is that many people around the world, and many of them some very tricky, criminal and evil elements also use this User-Agent string. They forge it! The reason is that they want to trick a webmaster and pretend that they are Googlebot. These people do it because they usually get a "green light" to move around the site and access pretty much everything.

As I said, User-Agent string cannot be relied upon for security. The only way to be certain that a visitor to your site is a real Googlebot is by IP address.

The text above is another reasoning why any sort of "robot simulator" you are using is a bad thing. I would not use any "simulator".

DO YOU KNOW HOW TO READ THE LOG?

Traffic Cop has a page called "Deny Log". This is a table which shows all the recent "deny events". This means all the HTTP requests that have been denied access.

The log table shows some important information, such as IP address, host name, User-Agent etc.

For example, a real Googlebot always has hostname googlebot.com, or the given IP address can be traced back to Google Inc., Mountain View, California, using the Whois function, which is part of Traffic Cop. Just click on the hyperlink of the IP address and you will see!

As I said, the User-Agent information in the log table (although useful) can be forged, so it cannot be relied upon. Although it may say "...Googlebot...", it may be some trickster trying to sneak into your site.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: lee on August 19, 2010, 12:47:18 am
Hi Peter thanks for the update are the instructions ive added below the right way to update traffic cop as they are slightly different from you instruction

Best regards lee

First delete the existing IP2nation Database,
 then upload the new SQL file to your server (folder /include/plugins/TrafficCop/),
then click "Install IP2nation Database" in the Admin control panel.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on August 19, 2010, 02:01:17 am
Hi Lee, thanks for the comment. Your instructions are correct and so are mine! No problem. Thanks again!


Title: Version 4.00 is a MAJOR RELEASE
Post by: Peter on September 10, 2010, 11:37:13 pm
Today, 11 Sept, version 4.00 became available on the Market.

This is a MAJOR release. Many functions have been rewritten, bugs fixed, new functions added, old functions improved.

In detail:

1.) Eliminated one SQL query in function checkDenialDB(). Moved  denial event counting to function logSingleDenial(). -- This improves speed.

2.) Added  "Security Alerts by Email (Hacker Attack Instant Notification)"  feature. -- Now you can receive an alert into your email mailbox (mobile phone?) the instant when a security threshold has been breached. You define the threshold yourself. I have verified that these alerts can be received on Gmail accounts, but you should double check by using the included test tool.

3.) Added "Basic User-Agent Security". -- This verifies that User-Agent string is not forged. The function checks for User-Agent length and presence of invalid (evil) characters.

4.) Updated ARIN WHOIS URL link in whois() function. -- ARIN has changed the URL on their website.

5.) OTHER: Changed  character encoding to UTF-8. Column `condition` in table  `jb_log_redirects` changed to MEDIUMTEXT.

6.) Extensive updates and additions to Deny Rules in file CONFIGURATION_PLEASE_READ.txt. -- This is SIGNIFICANT!

7.) Added support for inline images (data URI scheme) to speed up  page download (of Admin pages of Traffic Cop).

8.) Added a function to count DNS files in DNS cache.

9.) Many other improvements, bug fixes, functional additions and enhancements. (2010-09-11)

This is what I am thinking about right now and I want you to know.

Cheers,
Peter


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Amjad on September 11, 2010, 10:06:29 am
Quote
Some ideas going through my head right now are that I sell the Deny Rules as a stand-alone product. (Traffic Cop would come only with few lines of most basic rules.)

This is what I am thinking about right now and I want you to know.

Thanks for your plugin Peter,you can sell it to new customers.we started and suportted the traffic cop from the beginning.!!!


Title: version 4.08 is out! SCREEN SHOTS...
Post by: Peter on October 06, 2010, 09:06:24 am
Traffic Cop version 4.08 is out and includes some improvements. Please update your existing installation.

Please take a look at these screenshots of the latest version!


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on October 06, 2010, 01:29:53 pm
I love this tool. Its probably the best plugin that I have purchased.  Thanks and keep up the support :)


Title: TRAFFIC COP version 4.27 is out!
Post by: Peter on November 11, 2010, 11:07:45 pm
The latest version 4.27 of TRAFFIC COP is out. Please update!

Improved function sweepArray() in page "configuration".
Expanded the possible HTTP response deny actions to HTTP status 204, 403, 404, 405, 410, 417, 418, 423, 500, 501, 502 and 503.

Deny Rules file contains:

    * 20 User-Agent regular expressions
    * 28 countries
    * 13 host name regular expressions
    * 12 referrer regular expressions
    * 31,778,448 IP addresses

Besides a redirection to another website, TRAFFIC COP can deny requests with following HTTP responses (status):

204 ..... No Content
403 ..... Forbidden (recommended; default)
404 ..... Not Found
405 ..... Method Not Allowed
410 ..... Gone
417 ..... Expectation Failed
418 ..... I'm a teapot
423 ..... Locked
500 ..... Internal Server Error
501 ..... Not Implemented
502 ..... Bad Gateway
503 ..... Service Unavailable

For more information on HTTP status codes, see http://en.wikipedia.org/wiki/List_of_HTTP_status_codes (http://en.wikipedia.org/wiki/List_of_HTTP_status_codes) .

Which status code shall you choose?

That's a good question! Status 403 is most likely the best and safe choice, as most users and robots will understand the word "forbidden". However, a malicious robot (operated by unscrupulous hacker) doesn't really care much about a status code. They only want see status "200 OK" and read what's on the requested page. So if this assumption is correct, you could choose any of the available codes, including the funny status 418.


Title: Under Maintenance - another way to use Traffic Cop
Post by: Peter on November 29, 2010, 02:06:57 am
Here is another way to take advantage of Traffic Cop's traffic management capabilities.....

You can use Traffic Cop to put your site into "Maintenance Mode" very simply by doing this --

1.) On Traffic Cop's page "Deny Rules" in Section 1.1 define this deny rule (just add it to whatever you have there):
Code:
This means that all users trying to visit your site will get status 503 page (temporarily unavailable). Search engine robots like this, because they know that they can come back soon when your maintenance work is done.

2.) Define Whitelist Rule in Section 2.2 by listing your IP address or IP address range. You can instead list your host name etc. This way only you (admin) can access the site.


Once you finish your maintenance work, you can disable Traffic Management on the page "Settings" or just change your deny rules to whatever they were before (and remove the whitelist rule).


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: steve on December 06, 2010, 05:04:22 am
I just downloaded the latest version of TrafficCop (4.34) and uploaded it to the latest version of jamit. (3.6.8). I clicked enable and then configure and I see this: "Unable to fetch date of database installation (IP2nation)."

What do I do?


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on December 06, 2010, 06:43:47 am
I just downloaded the latest version of TrafficCop (4.34) and uploaded it to the latest version of jamit. (3.6.8). I clicked enable and then configure and I see this: "Unable to fetch date of database installation (IP2nation)."

What do I do?

Steve,

My guess is that the import (installation) of the ip2nation database was for some reason interrupted. (This is very unusual. It never happened to anyone.)

Try deleting the ip2nation database (clicking the link on Traffic Cop's control panel), then refreshing the page (using the refresh link) and again installing the ip2nation database (clicking the link to install ip2nation database).


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: steve on December 06, 2010, 10:38:17 pm
It worked. Thanks

Steve


Title: My reply to Lee
Post by: Peter on January 11, 2011, 09:38:17 am
Lee writes:

I have a new problem with Traffic Cop.  Apparently, one of the rules is preventing me from visiting my own site.  I am still able to log into the Admin Panel, however I can not SAVE any rule changes.  Thus, I can't test to see which rule is blocking me.  When I make a rule change and hit "SAVE", I get a white screen -- when I re-load, the rules are unchanged.  

One suggestion for future release is to allow one to edit/configure rules while the plugin is disabled.   As it is, this is not possible.

I can't see which rule is blocking me.  I am using Comcast and my IP address changes periodically.  It's currently 24.7.124.73.  My rule set is below.  Any ideas about how to handle this?

Thnx,  
Lee
----------------------------
Hi Lee,

I have replied to your enquiry, but your mail server won't accept my emails. My IP must be on your blacklist? I sent you replies bu they always bounce back. This is why I resort to post the reply here on the Forum.

Lee,
I am outside, so I will try to quickly answer this.
A lockout can happen, but I don't think this is your case.
I think this is error 500.
Please go to your server's log, namely the error log and try to find what is happening. The error log entries usually tell exactly what's wrong, like syntax or missing function or a variable thar doesn't exist.

Peter


Title: TRAFFIC COP vs. Paypal
Post by: Peter on January 16, 2011, 03:33:18 am
It has come to my attention that Traffic Cop may be causing some undesirable interaction with the Paypal IPN on Job Board.

I will immediately investigate this and do my best in providing a fix as soon as possible. However, I need to stress the following:

Traffic Cop does not detect bots. It must some rule that is defined in the EXAMPLE_DENY_RULES.txt file.

This file has a disclaimer that "it is likely to contain errors" and that "I assume no liability".

Putting together the Deny Rules is enormous task by itself and no one is paying me for providing accurate Deny Rules. I supply them as a freebie and only as "example".

As I said, I will start working on fixing the example on Monday. Please stay tuned.

If anyone has some additional information that may help me in fixing the Deny Rule, I will appreciate it.


Title: v 4.40 TRAFFIC COP
Post by: Peter on February 20, 2011, 01:39:08 am
Please download and install the latest version 4.40 of Traffic Cop from Market website.

This version contains the following changes:

  • Fixed bugs in whitelisting of IP addresses, hosts and user-agents.
  • REMOVED FUNCTIONS*: 'basic user-agent security' and 'basic referrer security'.
  • Deny Rules regular expressions for User Agents have been updated.

*) I am moving these 2 functions into separate plugins because it makes much more sense. NEW plugin called UA Police Lite will is available on Market. Another plugin called UA Police Pro will follow soon.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on February 27, 2011, 10:02:43 pm
Peter,

I updated to the newest Traffic Cop and I am now receiving this error message on my front page:

Code:
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /homer/mysite/public_html/include/plugins/TrafficCop/TrafficCop.php on line 533

I deleted the ip nation database thinking that was the problem, but that didn't help... I then tried to go back to the old version but it gave me all sorts of error messages, so I uninstalled that and tried your new version again but I get the same message.... Any ideas?

Thanks

-wclang


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on March 01, 2011, 03:06:13 am
Wclang,

Weird. The error message says that there is an error on line 53, however, there is NO code on line 53 or nearby.

I wonder if the upload of the file TrafficCop got corrupted.

I experience no such problem.

Please re-upload the file.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on March 01, 2011, 06:13:35 am
Peter,

I tried it again and had the same problem. I decided to delete the Traffic Cop folder and I deleted the ipnation database; I reinstalled everything and had the same problem again. I figured I would try the Flush DNS Cache and Flush Deny Log database, and what do you know everything started working correctly.  That was very odd?!?!?  Anyway, it works now :)

Thanks again,

-wclang


Title: ver 4.41a TRAFFIC COP
Post by: Peter on March 13, 2011, 12:38:37 am
Traffic Cop is now at version 4.41a. Please download and update!

Make SURE to download the file named TrafficCop_4.41a.zip and NOT the file 4.41.zip as the latter has a small bug.

In version 4.41a, added function to suggest usage of plugin 'UA Police'. Improved regular expression validator. Added option to specify plugin priority. (2011-03-13)

Deny Rules updated and contain:

    * 19 User-Agent regular expressions
    * 29 countries
    * 13 host name regular expressions
    * 13 referrer regular expressions
    * 32,369,232 IP addresses


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on March 14, 2011, 03:46:57 pm
Peter,

I installed your newest version of Traffic Cop 4.41 and after the ip nation database is installed I refreshed the page and this is the error I recieved:

Code:
Fatal error: Call to undefined method TrafficCop::createTable_session_guests() in /home88/yepper/public_html/include/plugins/TrafficCop/TrafficCop.php on line 2594

Also, I can't deactivate the plugin because the error code keeps popping up. I tried deleting the folder but that threwup more errors so I had to remove it from the config.php file. I tried to install the old version I was using and it won't install because this newer version is still registered.

Thoughts?

Thanks,

-wclang


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on March 14, 2011, 10:32:29 pm
...I installed your newest version of Traffic Cop 4.41 and after the ip nation database is installed I refreshed the page and this is the error I recieved....

Terribly sorry! The fixed download on Market is now TrafficCop_4.41b. Please download the "b" version and upload to your server. This will eliminate the said bug.  :P


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on March 15, 2011, 12:38:32 am
Thanks Peter. That fixed the problem :)


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on March 27, 2011, 05:51:45 am
Peter,

Everytime I try to disable Traffic Cop I receive this error message:

Code:
Fatal error: Call to undefined method TrafficCop::clear_plugin_settings() in /home1/mysite/public_html/include/plugins/TrafficCop/TrafficCop.php on line 2270

Any idea how to fix it?

Thanks,

wclang


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on March 27, 2011, 12:17:55 pm
...Everytime I try to disable Traffic Cop I receive this error message....

Bill, I suspect that you are not using the latest version of TC, which is 4.41c. Can you check?


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: wclang on March 28, 2011, 02:29:56 am
Hello Peter,

I was using 4.40 and it was working great with no problems and then all of a sudden I end up with these issues.  I upgraded to the newest version and everything works again, but why would it stop working once a new version has been pushed out, or is it just a coincidence?

Thanks for your help Peter :)


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on March 28, 2011, 02:52:36 am
...but why would it stop working once a new version has been pushed out, or is it just a coincidence?...

Not quite sure about your specific conditions, but bugs tend to sneak in, always. Sorry about that.


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Regan on April 20, 2011, 08:48:28 pm
The whitelisting function doesn't work. I have tried to whitelist specific countries and IP addresses and people are still getting a 403 message. shouldn't whitelisting the country override any other consideration?


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on April 23, 2011, 03:33:57 am
The whitelisting function doesn't work. I have tried to whitelist specific countries and IP addresses and people are still getting a 403 message. shouldn't whitelisting the country override any other consideration?

This is most likely because those IP addresses that you have whitelisted are in the Deny Log.

How the Deny Log works:
Any IP address that is in the Deny Log will get denied again.

You can go to the Deny Log page and manually remove those IP addresses.


Title: Updated ip2nation database
Post by: Peter on August 16, 2011, 02:10:44 am
The ip2nation database, used by Traffic Cop, has been updated on 2011-07-31.

You may download it from: http://ip2nation.com/

The update is very important as it determines accuracy of IP address to country conversion.


Title: Version 6.2.1, Deny Rules, .htaccess
Post by: Peter on September 13, 2011, 01:10:37 am
Version 6.2.1 of Traffic Cop had been released today.

As compared to the previous release (v6.1.1), this version does not have any changes to the code. However, significant changes have been made to the DENY RULES file and an example .htaccess file had been added for better IP address blocking.

What is .htaccess file? - Read on Wikipedia http://en.wikipedia.org/wiki/Htaccess

I have revised and updated the list of blocked IP addresses (ranges). This had been reflected in the DENY RULES file. However, much more effective way to block IPs is by the use of the .htaccess file, because it will
  • reduce the load to server
  • protect all the files on the server, not just PHP files.

You are advised to use the .htaccess file for IP blocking. If you do that, you should remove the IP blocking setting from your DENY RULES. This will make your Job Board work faster.

QUESTION: "So why then still use Traffic Cop?" ???

ANSWER: Traffic Cop can block malicious traffic based on several criteria, not just IP. Those include server name, country, referrer etc. Traffic Cop will help you block malicious visitors, record their IP in the deny log. Having their IP will then give you a chance to enter this IP address (or a whole block) into your .htaccess file.

Traffic Cop can detect proxies and their IP, while .htaccess cannot.

Traffic Cop can do fuzzy IP address matching, .htaccess cannot.

Users that don't use Apache server cannot use the .htaccess file, but still will benefit from the updated DENY RULES.


Title: Updated ip2nation database
Post by: Peter on September 15, 2011, 02:52:54 am
Database ip2nation was updated on August 20, 2011.

You can download it from:

http://ip2nation.com/ip2nation

Then follow the instructions in README.txt of Traffic Cop on how to update it in your Job Board.

I will include the database in the next release of Traffic Cop.


Title: TRAFFIC COP v6.2.2
Post by: Peter on September 21, 2011, 11:25:47 pm
Traffic Cop v6.2.2 was released today. The new release includes these important changes:

  • Fixed CRITICAL bug
  • New ip2nation database. Please delete the ip2nation database in your Traffic Cop installation and install the new one.
  • Updated DENY RULES. Please follow the instructions in the DENY RULES file.

Feel free to contact me should you have any questions or require assistance. I am on Skype!

I can also help you (free of charge) in setting up your Traffic Cop.


Title: TRAFFIC COP v6.2.4
Post by: Peter on December 11, 2011, 05:47:23 am
The latest brew of Traffic Cop is out. Please download and install. This version includes:

  • Updated ip2nation database. Please follow instructions on how to delete your existing ip2nation database and install the new one. This database is dated 2011-12-11.
  • Fixed bug in mailer class.
  • Updated DENY RULES and .htaccess file.

Please let me know if you require my assistance (free of charge).


Title: TRAFFIC COP v7.0.0 is IPv6 ready!
Post by: Peter on June 06, 2012, 03:21:19 am
Dear customer,

6 June is being celebrated as World IPv6 Day. Today many Internet service providers around the world as well as many major websites will begin permanent use of the IPv6 protocol address.

Today Colossal Mind has released TRAFFIC COP version 7.0.0 which is IPv6 ready.

Besides being able to work with IPv6 addresses, the new release features new functions and enhancements (newest ip2nation database, new deny rules, etc.).

If you already own TRAFFIC COP, please download and install the latest version at your earliest convenience. If you don't own it yet, perhaps you'd consider buying it?

https://colossalmind.com/products/traffic-cop.html

If you ever need free help with installation or setup, don't hesitate contacting me!

May you have a happy IPv6 day,
Peter Kahl


Title: Re: TRAFFIC COP (Bad guys hate the cop!)
Post by: Peter on June 07, 2012, 12:47:53 am
The new TRAFFIC COP 7.x.x contains new IP2nation database.

To update the ip2nation database:

    -Go to your main Traffic Cop control panel.
    -Click the link "Delete IP2nation Database". In the popup window, click "delete". Close the popup window.
    -In the Traffic Cop control panel, "refresh page". You will see link "install ip2nation database", click it. A popup window will display progress of the import.
    -After the database installation finishes, close the popup window.
    -Refresh the page of Traffic Cop control panel.
    -Done!

Traffic Cop version 7.1.0 is out today!


Title: TRAFFIC COP 7.3.0 released
Post by: Peter on July 30, 2012, 02:01:21 am
TRAFFIC COP 7.3.0 was released today and can be downloaded from the Jamit Market or from my site.

When updating your Traffic Cop installation, always:
  • Consider adding the EXAMPLE BLACKLIST (DENY) RULES to your configuration. The rules included with Traffic Cop are the most updated, containing many new IP ranges worth blocking.
  • Update your ip2nation database. To do this, first delete the existing ip2nation database from your Admin control panel, then import (install) the new one. The newest SQL file is included in this new version of Traffic Cop.