YaBB Community and Support Forum
YaBB Home About YaBB Download YaBB YaBB Support Customize Your Forum Development Contribute to the Project
  Welcome, Guest. Please Login or Register


 
Pages: 1 2 
Topic Tools
 
problem with registration email filter (Read 2,596 times)
 May 8th, 2013 at 10:01am
There are no actions to perform.  

freediver 
Senior Member
****
Offline
Posts: 515


None
problem with registration email filter
A member had issues registering with an email address with a ua in it. I tried it myself and confirmed. That is, stuart.....@gmail.com threw the error, however when I tried ua@gmail.com it worked.

Any ideas?

The error message is:

"you may not register with, post as a guest or change your e-mail address to one from the domain.*@*.ua"

I have the following line under blocked email domains:

*@*.ua

I cannot post the rest because it trips the spam filter.
 
Founding member of .... I recently upgraded from YaBB 2.2.1 to 2.5 AE to 2.5.2.
WWW  
IP Logged  
 Reply #1 - May 8th, 2013 at 1:24pm
There are no actions to perform.  

Elrick 
YaBB Moderators
Beta Testers
***
Offline
Posts: 147
Edge of the Abyss


YaBB 2.5
Re: problem with registration email filter
Yes, it would trigger the error as you are not banning the domain but *anything* that contains ‘ua’.  The same goes for banning  ‘.pl’ (suggesting Poland) as your forum would contain ‘yabb.pl’ and would deny access to your forum.

Suggest to use email domain filter with the email domain included, such as:-


Code Select All
coat.kiev.ua
e-mail.ua
i.ua
meta.ua
thailaaa.org.ua
 



Hope this helps
 
~ Elrick ~
There is no direct experience of reality without interpretation; and all interpretation is corrupted by the cultural and personal prejudices or prejudgments of the interpreter.
 
IP Logged  
 Reply #2 - May 11th, 2013 at 12:34am
There are no actions to perform.  

freediver 
Senior Member
****
Offline
Posts: 515


None
Re: problem with registration email filter
It is my understanding that

*@*.ua

means that to trip the filter, it needs the string ".ua" after the "@" symbol. Trying to list every possible url ending in .ua is not an option for me.

I'll try removing the domain filters and see what happens.
 
Founding member of .... I recently upgraded from YaBB 2.2.1 to 2.5 AE to 2.5.2.
WWW  
IP Logged  
 Reply #3 - May 11th, 2013 at 1:21am
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,856
Earth


YaBB 2.5
Re: problem with registration email filter
Wild cards don't work with the email domain filters.  

However, it may be possible to modify the domain filter code to allow it to just look at the final sequence and block domains that way. (Maybe)
« Last Edit: May 11th, 2013 at 1:56am by Dandello »  
WWW  
IP Logged  
 Reply #4 - May 11th, 2013 at 5:43am
There are no actions to perform.  

xnoddyx 
Support Team
Documentation Team
YaBB Moderators
YaBB Next Team
Beta Testers
****
Offline
Posts: 1,552
UK:Scotland/livingston


YaBB 2.5
Re: problem with registration email filter
You can block an entire block, such as .ru, but must be entered as "\.ru" without quotes.
see http://www.yabbforum.com/community/YaBB.pl?num=1279161004
 
YaBB install help video
1. what yabb forum are you running and the url
2. describe in as much detail as you can what happens and also post screenshots if you can
3. please be patient we live in different time zones and have other commitments but we will help you
as bill and ted say (Be excellent to each other)
WWW xnoddyx xnoddyx1  
IP Logged  
 Reply #5 - May 11th, 2013 at 6:37am
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,856
Earth


YaBB 2.5
Re: problem with registration email filter
On testing the "\.ru" in email domain blocking - in 2.5.2 it doesn't work.

What I cobbled together seems to work - not pretty and I'm sure Carsten will come up with a nicer way of doing it but:

In Security.pl find
Code Select All
		if ($bdomains) {
			foreach (split (/,/, $bdomains)) {
				if ($_ !~ /\@/) {$_ = "\@$_";}
				elsif ($_ !~ /^\./) {$_ = ".$_";}
				&fatal_error("domain_not_allowed","$_") if $checkdomain =~ m/$_/i;
 



replace with
Code Select All
        if ($bdomains) {
            foreach ( split /,/xsm, $bdomains ) {
                $my_x = $_;
                if    ( $_ !~ /\@/xsm )  { $_ = "\@$_"; }
                elsif ( $_ !~ /^\./xsm ) { $_ = ".$_"; }
                @my_ch = split /\./xsm, $my_x;
                @my_ch_e = split /\./xsm, $checkdomain;
                if ($checkdomain =~ m/$_/ism || ($my_ch[0] eq q{} && $my_ch[-1] eq $my_ch_e[-1]) ) { fatal_error( 'domain_not_allowed', "$_" ) ;}
            }
        }
 



This adds an extra step comparing the '.ru' or whichever to the final sequence of the email address being checked. Like the domains, one per line and the dot needs to be in front.

 
WWW  
IP Logged  
 Reply #6 - May 11th, 2013 at 8:05am
There are no actions to perform.  

xnoddyx 
Support Team
Documentation Team
YaBB Moderators
YaBB Next Team
Beta Testers
****
Offline
Posts: 1,552
UK:Scotland/livingston


YaBB 2.5
Re: problem with registration email filter
Dandello wrote on May 11th, 2013 at 6:37am:
On testing the "\.ru" in email domain blocking - in 2.5.2 it doesn't work.

wonder why it stopped working in 2.5.2 as that bit is more or less self contained  Undecided isn't it what about 2.5.4?
 
YaBB install help video
1. what yabb forum are you running and the url
2. describe in as much detail as you can what happens and also post screenshots if you can
3. please be patient we live in different time zones and have other commitments but we will help you
as bill and ted say (Be excellent to each other)
WWW xnoddyx xnoddyx1  
IP Logged  
 Reply #7 - May 11th, 2013 at 12:01pm
There are no actions to perform.  

Elrick 
YaBB Moderators
Beta Testers
***
Offline
Posts: 147
Edge of the Abyss


YaBB 2.5
Re: problem with registration email filter
You could add following referer blocking comment to the .htaccess file (as I have on my forums) to block country referers at server level. It stops them dead on their tracks!. But do not use "\.pl" unless it is the full URL (without www. or http://) as it would block your forum too!!.

Note that the last item on the list must not contain [NC,OR]

Code Select All
RewriteEngine on
# Options +FollowSymlinks
RewriteCond %{HTTP_REFERER} \.in [NC,OR]
RewriteCond %{HTTP_REFERER} \.io [NC,OR]
RewriteCond %{HTTP_REFERER} \.pn [NC,OR]
RewriteCond %{HTTP_REFERER} \.ru [NC,OR]
RewriteCond %{HTTP_REFERER} \.ua [NC,OR]
RewriteCond %{HTTP_REFERER} \.uk [NC,OR]
RewriteCond %{HTTP_REFERER} blueink\.pl
RewriteRule .* - [F]
 



The blocking of referrers via .htaccess file is most effective Wink as per error log....

Code Select All
[Sat May 11 09:41:02 2013] [error] [client 178.165.70.123] client denied by server configuration: /home/myserver/public_html/,
referer: http://ibf-rent.ru/pages/

[Sat May 11 09:41:01 2013] [error] [client 178.165.70.123] client denied by server configuration: /home/myserver/public_html/cgi-bin/yabb2/YaBB.pl,
referer: http://ibf-rent.ru/pages/

[Sun May 12 04:03:19 2013] [error] [client 178.165.70.123] client denied by server configuration: /home/myserver/public_html/,
referer: http://elitkeramika.com.ua/pages/

[Sun May 12 04:03:18 2013] [error] [client 178.165.70.123] client denied by server configuration: /home/myserver/public_html/cgi-bin/yabb2/YaBB.pl,
referer: http://elitkeramika.com.ua/pages/
 

« Last Edit: May 12th, 2013 at 10:52am by Elrick »  
~ Elrick ~
There is no direct experience of reality without interpretation; and all interpretation is corrupted by the cultural and personal prejudices or prejudgments of the interpreter.
 
IP Logged  
 Reply #8 - May 11th, 2013 at 2:43pm
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,856
Earth


YaBB 2.5
Re: problem with registration email filter
xnoddyx wrote on May 11th, 2013 at 8:05am:
Dandello wrote on May 11th, 2013 at 6:37am:
On testing the ".ru" in email domain blocking - in 2.5.2 it doesn't work.

wonder why it stopped working in 2.5.2 as that bit is more or less self contained  Undecided isn't it what about 2.5.4?


None of the sections involved in e-mail blocking got changed from 2.5AE and when I test my virgin 2.5AE and 2.4 testbeds it doesn't work there either. The backslash doesn't get saved (at least on my XP/Apache set up) so it's looking to match "@.ru" not "@*.ru". So unless things are different on Linux boxes, or some bit of instruction is missing from CaptJohn's solution, I'm not seeing it as working  even though the instructions indicate it should work in 2.5AE and therefore should work in 2.5.2. (and just "ru" will block any addresses that have "ru" in them anywhere.)

My workaround explicitly looks for the email section after the last period to match against a string that has nothing in front of the period.

Edited:
Haven't tested Elrick's solution on e-mails.

Edited:
And you can put in partial domains into Guardian->referrer blocking.
« Last Edit: May 11th, 2013 at 3:28pm by Dandello »  
WWW  
IP Logged  
 Reply #9 - May 11th, 2013 at 11:53pm
There are no actions to perform.  

xnoddyx 
Support Team
Documentation Team
YaBB Moderators
YaBB Next Team
Beta Testers
****
Offline
Posts: 1,552
UK:Scotland/livingston


YaBB 2.5
Re: problem with registration email filter
Dandello wrote on May 11th, 2013 at 2:43pm:
None of the sections involved in e-mail blocking got changed from 2.5AE and when I test my virgin 2.5AE and 2.4 testbeds it doesn't work there either. The backslash doesn't get saved (at least on my XP/Apache set up) so it's looking to match "@.ru" not "@*.ru". So unless things are different on Linux boxes, or some bit of instruction is missing from CaptJohn's solution

that explains that I have also not used e-mail blocking.
 
YaBB install help video
1. what yabb forum are you running and the url
2. describe in as much detail as you can what happens and also post screenshots if you can
3. please be patient we live in different time zones and have other commitments but we will help you
as bill and ted say (Be excellent to each other)
WWW xnoddyx xnoddyx1  
IP Logged  
 Reply #10 - May 12th, 2013 at 12:48am
There are no actions to perform.  

Bill Myers 
God Member
Beta Testers
*****
Offline
Posts: 1,482
Los Angeles


YaBB 2.4
Re: problem with registration email filter
YaBB's anti-spam measures are so good now that email blocking is no longer needed, nor is it necessary to use the IP banning list (generally speaking).

In our YaBB 2.4 forum, the instructions are, "Email banning: (e.g. badguy\@somewhere.com) - one entry per line".

Also in our forum, as I just tested it, "\.ru" does get saved even though I've chosen not to use it.

« Last Edit: May 12th, 2013 at 12:54am by Bill Myers »  
Morning, noon, or night, have a great one! ...
WWW BillHMyers  
IP Logged  
 Reply #11 - May 12th, 2013 at 2:31am
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,856
Earth


YaBB 2.5
Re: problem with registration email filter
There's e-mail banning and email domain blocking that are in different sections. The "\.ru"  does work from the e-mail ban section - but then gives the wrong error message. (And maybe that's the section Capt John was referring to.)

And on my forums I do have a few email domains that are blocked.
« Last Edit: May 12th, 2013 at 2:32am by Dandello »  
WWW  
IP Logged  
 Reply #12 - May 12th, 2013 at 3:11am
There are no actions to perform.  

xnoddyx 
Support Team
Documentation Team
YaBB Moderators
YaBB Next Team
Beta Testers
****
Offline
Posts: 1,552
UK:Scotland/livingston


YaBB 2.5
Re: problem with registration email filter
Dandello wrote on May 12th, 2013 at 2:31am:
There's e-mail banning and email domain blocking that are in different sections. The "\.ru"  does work from the e-mail ban section - but then gives the wrong error message. (And maybe that's the section Capt John was referring to.)

just thinking on this can this be consolidate into one so to simplify it in the next yabb will also cut down on the confusion as well.
 
YaBB install help video
1. what yabb forum are you running and the url
2. describe in as much detail as you can what happens and also post screenshots if you can
3. please be patient we live in different time zones and have other commitments but we will help you
as bill and ted say (Be excellent to each other)
WWW xnoddyx xnoddyx1  
IP Logged  
 Reply #13 - May 12th, 2013 at 5:53am
There are no actions to perform.  

Dandello 
Global Moderator
YaBB Next Team
Operations Team
Beta Testers
Support Team
*****
Offline
Posts: 1,856
Earth


YaBB 2.5
Re: problem with registration email filter
I think this is a case where YaBB just needs much better documentation. Banning should really be an 'after the fact' action while email domain blocking should be considered a 'preventative' action on the order of the referrer blocking that Guardian can do.

However, we need to think about better ways of organizing things and maybe even putting in additional cross-links between sections. (Like a link to the email domain setting from Guardian and member banning.)
 
WWW  
IP Logged  
 Reply #14 - May 12th, 2013 at 6:10am
There are no actions to perform.  

Bill Myers 
God Member
Beta Testers
*****
Offline
Posts: 1,482
Los Angeles


YaBB 2.4
Re: problem with registration email filter
Dandello wrote on May 12th, 2013 at 2:31am:
There's e-mail banning and email domain blocking that are in different sections.

I had forgotten about that. Or more accurately, I hadn't fully realized that email domain blocking is the same as domain name blocking in the Global and Server Settings of The Guardian™. Like xnoddyx mentions, having this in one place can cut down on the confusion.

In any case, I see what you mean about not being able to save "\.ru" in The Guardian™. The same can be said for "*.ru" or anything else for that matter. But since this seems to be a 2nd place to ban email addresses/domains, I guess it doesn't matter.

OH MY GOSH and WHOOPS!



While I was working on this message, and playing around with The Guardian™ to test some things, I broke our forum with a 500 error. So I uploaded a backup of both the AdminIndex.pl and YaBB.pl files since those seemed to be throwing the 500 error, and our forum was still inaccessible.

What I ended up doing was to delete the .htaccess file in YaBB's main directory (I should have saved it first to see how I messed things up). That worked!

So to any of you who are messing around with The Guardian™ just because you want to test stuff out, please be careful!

But at least if you goof up like I did, you'll know what to do. Roll Eyes


Edited:

Dandello wrote on May 12th, 2013 at 5:53am:
However, we need to think about better ways of organizing things ...

For the record, and I've looked around, I think YaBB has a relatively easy-to-use Admin Center compared to other forum software.

So please don't change it too much. Smiley

« Last Edit: May 12th, 2013 at 6:17am by Bill Myers »  
Morning, noon, or night, have a great one! ...
WWW BillHMyers  
IP Logged  
Pages: 1 2 
Topic Tools
 

Get Yet another Bulletin Board at SourceForge.net. Fast, secure and Free Open Source software downloads Support This Project BoardMod - YaBB features and templates YaBB Codex - support on installation and usage YaBB Toolbar for your browser

YaBB Facebook Group Page

Vulnerability Scanner

Valid RSS Valid XHTML Valid CSS Powered by Perl
YaBB Chat and Support Community » Powered by YaBB 3.0 Beta!
YaBB Forum Software © 2000-2011. All Rights Reserved.