Webmaster's Blog

Moderator: Moderators

Post Reply

Do you think the site and forum are moving in the right direction

Yes
6
100%
No
0
No votes
 
Total votes: 6

User avatar
Credible
Life Member - MR2OCNZ
Posts: 881
Joined: Wed Nov 09, 2005 6:41 pm
Stomping Ground: Auckland
Prime Mover: AW11
First name: david

Re: Webmaster's Blog

Post by Credible »

Are those requests all login attempts? If so, one approach - if you have the appropriate level of control - is to deliberately slow down the login process, so they don't get a response for 0.5 to 1 second. (Or more.)
David White
1989 AW11 SC manual t'top [sold]
2012 Toyota 1.6 NA mid-engine with a UK bodykit [Lotus Elise]

User avatar
Benckj
Forum Moderator - MR2OCNZ
Posts: 6993
Joined: Thu Nov 24, 2005 12:44 pm
Stomping Ground: Otago
Prime Mover: More than one MR2
First name: Jim

Re: Webmaster's Blog

Post by Benckj »

Wonder what would be gained in gaining access to our forum, extortion perhaps?

Good on ya Charlie for keeping it safe.
Jim Benck
90 rev 1 parts car
98 rev 5 GT- all the mods

User avatar
thelinuxwarrior
Club Member - MR2OCNZ
Posts: 156
Joined: Tue Dec 25, 2012 2:46 pm
Stomping Ground: Auckland
Prime Mover: SW20
First name: Shane

Re: Webmaster's Blog

Post by thelinuxwarrior »

Never used it to protect phpbb3 but we use "failtoban" on our firewall and webservers.
Basically you setup a filter to go through the log files and after X login/access attemps (normally 5) it will block the ip address for Y minutes (normally 30mins)
If you are running this on a linux server it should be reasonably easy to configure, all it does behind the scenes is block the ip address using iptables.

http://www.fail2ban.org/wiki/index.php/Apache" onclick="window.open(this.href);return false;

User avatar
thelinuxwarrior
Club Member - MR2OCNZ
Posts: 156
Joined: Tue Dec 25, 2012 2:46 pm
Stomping Ground: Auckland
Prime Mover: SW20
First name: Shane

Re: Webmaster's Blog

Post by thelinuxwarrior »

Also as suggested, you can whitelist certain ip address and only allow those access to certain subdirectorys (admin) using apache.
Although if you need access from dynamic ip addresses this won't really work...

Wayne
Guest of the Club.
Posts: 346
Joined: Sun Nov 17, 2013 12:04 pm
Stomping Ground: Manawatu
Prime Mover: SW20
First name: Wayne

Re: Webmaster's Blog

Post by Wayne »

If he's hosting at home he can make it local access only

User avatar
mickeyduck
Life Member - MR2OCNZ
Posts: 6108
Joined: Mon Apr 25, 2005 11:30 am
Stomping Ground: Auckland
Prime Mover: More than one MR2
First name: Charlie

Re: Webmaster's Blog

Post by mickeyduck »

Thanks guys. Yeah all those kind of measures are in place but it's funny how much these clowns will still throw at the attempt. Like I said, I guess they just see it as a challenge. Anyway the traffic graph is a lot more mellow tonight. Hopefully it stays that way!
#8^) Charlie the certified Westie
Retired - President 2012 - 2018
Retired - Committee Member 2009 - 2018
Retired - Auckland Area Coordinator 2009 - 2018
Retired - Webmaster, Forum Host & Admin 2010 - 2018 - Now it's mknz

Financial Club Member since 2004 and thanks to *84vvt and co-conspirators, Life Member since April 2017 8)
100+ MR2OCNZ runs and counting... When going hard, good rubber's your best protection against unwanted accidents. Buy good tyres!
When you're nearing the end of the drag-strip and you have no 'chute, you may as well keep your foot to the floor... Live life. There ain't no second pass. :twisted:

User avatar
Hayden
Club Member - MR2OCNZ
Posts: 407
Joined: Mon Sep 19, 2011 10:55 pm
Stomping Ground: Auckland
Prime Mover: Looking for an MR2
First name: Hayden
Contact:

Re: Webmaster's Blog

Post by Hayden »

What sort of traffic to the site do you get Charlie? If you were looking at allowing users to download large files like service manuals and such I'm happy to host an FTP server at mine, though a Dynamic DNS service would be a must as I can't get a static IP.

I'm one of the lucky few who have fibre, and we sit on a 100Mbps down, 50Mbps up line. Can set up QOS to guarantee traffic to upload server takes priority.

PM me Charlie if your interested, there won't be any charge for internet access etc, only thing that will need to be paid for \ sorted out is DDNS service.
Current Garage Fillers:
1992 Ferrari 348, 2006 Aston Martin DB9, 2019 Mercedes A180, 2012 BMW Z4, 2008 Toyota Hilux, 2008 Smart Fortwo, 2007 Mercedes SL350, and a bunch of rental cars.

Past Garage Fillers:
Many more MR2's than years I've lived.

User avatar
Hayden
Club Member - MR2OCNZ
Posts: 407
Joined: Mon Sep 19, 2011 10:55 pm
Stomping Ground: Auckland
Prime Mover: Looking for an MR2
First name: Hayden
Contact:

Re: Webmaster's Blog

Post by Hayden »

Just though I'd add in if it wasn't already obvious, we're sitting on an unlimited data cap.
Current Garage Fillers:
1992 Ferrari 348, 2006 Aston Martin DB9, 2019 Mercedes A180, 2012 BMW Z4, 2008 Toyota Hilux, 2008 Smart Fortwo, 2007 Mercedes SL350, and a bunch of rental cars.

Past Garage Fillers:
Many more MR2's than years I've lived.

User avatar
mickeyduck
Life Member - MR2OCNZ
Posts: 6108
Joined: Mon Apr 25, 2005 11:30 am
Stomping Ground: Auckland
Prime Mover: More than one MR2
First name: Charlie

Re: Webmaster's Blog

Post by mickeyduck »

Thanks Hayden. Probably my next step will be a migration to Rackspace or Azure. No panic regards hosting as I now have VDSL which is pretty good.

Looks like they are going to dig up the road soon so perhaps we'll be able to get fibre in the next year or two too.

The hits have been nice and normal since I tightened things up so that's good.

And I haven't heard anyone say they are shut out, except for our Membership Officer being locked out of the membership database, but that's since been sorted. :lol:
#8^) Charlie the certified Westie
Retired - President 2012 - 2018
Retired - Committee Member 2009 - 2018
Retired - Auckland Area Coordinator 2009 - 2018
Retired - Webmaster, Forum Host & Admin 2010 - 2018 - Now it's mknz

Financial Club Member since 2004 and thanks to *84vvt and co-conspirators, Life Member since April 2017 8)
100+ MR2OCNZ runs and counting... When going hard, good rubber's your best protection against unwanted accidents. Buy good tyres!
When you're nearing the end of the drag-strip and you have no 'chute, you may as well keep your foot to the floor... Live life. There ain't no second pass. :twisted:

User avatar
Benckj
Forum Moderator - MR2OCNZ
Posts: 6993
Joined: Thu Nov 24, 2005 12:44 pm
Stomping Ground: Otago
Prime Mover: More than one MR2
First name: Jim

Re: Webmaster's Blog

Post by Benckj »

Might be worth consideration Charlie to host off site.

Already have fibre down here. You still talking through strings?
Jim Benck
90 rev 1 parts car
98 rev 5 GT- all the mods

User avatar
mickeyduck
Life Member - MR2OCNZ
Posts: 6108
Joined: Mon Apr 25, 2005 11:30 am
Stomping Ground: Auckland
Prime Mover: More than one MR2
First name: Charlie

Re: Webmaster's Blog

Post by mickeyduck »

Home sick. Going back to work tomorrow. As an experiment to see if my brain is back to moderate working order I decided to upgrade the forum to phpBB 3.1 which has just been released today. It includes responsive functionality to cater for mobiles etc. Just tried it on my iPhone 5S and it seems pretty good. Certainly a lot easier to read and use.

Not sure which mods we'll miss as none of them could be upgraded. Meh. :P

OK might take a look at Rackspace hosting on Ubuntu next... :idea:
#8^) Charlie the certified Westie
Retired - President 2012 - 2018
Retired - Committee Member 2009 - 2018
Retired - Auckland Area Coordinator 2009 - 2018
Retired - Webmaster, Forum Host & Admin 2010 - 2018 - Now it's mknz

Financial Club Member since 2004 and thanks to *84vvt and co-conspirators, Life Member since April 2017 8)
100+ MR2OCNZ runs and counting... When going hard, good rubber's your best protection against unwanted accidents. Buy good tyres!
When you're nearing the end of the drag-strip and you have no 'chute, you may as well keep your foot to the floor... Live life. There ain't no second pass. :twisted:

Grrrrrrr!
Guest of the Club.
Posts: 1769
Joined: Tue Jul 26, 2011 10:38 pm
Stomping Ground: Auckland
Prime Mover: SW20
First name: Lee

Re: Webmaster's Blog

Post by Grrrrrrr! »

Massive amounts of wasted screen real estate either side of my desktop screen now, and all the users profile information is now published beside each post. Buy bigger monitor, website only uses half if it anyway. :lol:

Just tried it on mobile, not atrocious like a certian other mr2 sites mobile version, but think i'd rather stick with the desktop version.. but can't find a way to say "do not want mobile version".

User avatar
KWAFA
Club Member - MR2OCNZ
Posts: 265
Joined: Tue Apr 17, 2012 4:26 pm
Stomping Ground: Auckland
Prime Mover: ZZW30 (MRS / Spyder)
First name: Brandon

Re: Webmaster's Blog

Post by KWAFA »

I like it! We need a logo for the forum though.

Is this working on Tapatalk now?

User avatar
mickeyduck
Life Member - MR2OCNZ
Posts: 6108
Joined: Mon Apr 25, 2005 11:30 am
Stomping Ground: Auckland
Prime Mover: More than one MR2
First name: Charlie

Re: Webmaster's Blog

Post by mickeyduck »

Gimme a chance you grumpy old bugger... :P
Grrrrrrr! wrote:Massive amounts of wasted screen real estate either side of my desktop screen now, and all the users profile information is now published beside each post. Buy bigger monitor, website only uses half if it anyway. :lol:
#8^) Charlie the certified Westie
Retired - President 2012 - 2018
Retired - Committee Member 2009 - 2018
Retired - Auckland Area Coordinator 2009 - 2018
Retired - Webmaster, Forum Host & Admin 2010 - 2018 - Now it's mknz

Financial Club Member since 2004 and thanks to *84vvt and co-conspirators, Life Member since April 2017 8)
100+ MR2OCNZ runs and counting... When going hard, good rubber's your best protection against unwanted accidents. Buy good tyres!
When you're nearing the end of the drag-strip and you have no 'chute, you may as well keep your foot to the floor... Live life. There ain't no second pass. :twisted:

User avatar
mickeyduck
Life Member - MR2OCNZ
Posts: 6108
Joined: Mon Apr 25, 2005 11:30 am
Stomping Ground: Auckland
Prime Mover: More than one MR2
First name: Charlie

Re: Webmaster's Blog

Post by mickeyduck »

OK made it wider and slimmed down the profile bizzo. Can't yet figure how to add the link to the Gallery in to the header as the whole theme structure has changed drastically. In fact I can't even find how to refresh the theme cache cos the usual stuff isn't in the ACP anymore. Meh.

Meh-key Duck.
#8^) Charlie the certified Westie
Retired - President 2012 - 2018
Retired - Committee Member 2009 - 2018
Retired - Auckland Area Coordinator 2009 - 2018
Retired - Webmaster, Forum Host & Admin 2010 - 2018 - Now it's mknz

Financial Club Member since 2004 and thanks to *84vvt and co-conspirators, Life Member since April 2017 8)
100+ MR2OCNZ runs and counting... When going hard, good rubber's your best protection against unwanted accidents. Buy good tyres!
When you're nearing the end of the drag-strip and you have no 'chute, you may as well keep your foot to the floor... Live life. There ain't no second pass. :twisted:

Post Reply