Website Hosting Changes

Author

Message

Topic Search

Topic Options

H8jer

Admiral

Joined: 14 September 2010
Location: Denmark
Status: Offline
Points: 1503

Post Options

Post Reply

Quote H8jer

Report Post

Thanks(0)

Quote

Posted: 09 September 2011 at 17:00

No Problem with picture upload

with Google Chrome

Hanse 370#487 30HP 3-cabin

Peter-Blake View Drop Down

Admiral of the Fleet

Joined: 04 March 2008
Status: Offline
Points: 2471

Post Options

Post Reply

Quote Peter-Blake

Report Post

Thanks(0)

Quote

Posted: 20 September 2011 at 08:25

It seems that the update does´nt help to avoid spam.
The last days there are many spam attacs to this site.
Is there any possibility to set the spamfilter to a higher level?

Blake 370

H8jer

Admiral

Joined: 14 September 2010
Location: Denmark
Status: Offline
Points: 1503

Post Options

Post Reply

Quote H8jer

Report Post

Thanks(0)

Quote

Posted: 20 September 2011 at 12:52

It is an advanced type of Spam. There could be a robot that can cheat the "user creation" or an attacker that injects directly into the database.
This forum is running the "Web Wiz Forums ver. 8.04" which is insecure as I pointed out in november 2010.
http://myhanse.com/forum_posts.asp?TID=4585&KW=&PID=36990#36990

There are others who have problems with massive spam problems using this version, for example:
http://albufeira.com/forum/forum_posts.asp?TID=5999&PID=54066

I think there is someyone in China who earn money by making mass entries in the insecure Web Wiz Forums versions
http://www.securityfocus.com/bid/46131

To avoid this spam problem, I see no other option than to upgrade to the latest version, which is not expensive!

Hanse 370#487 30HP 3-cabin

Webmaster

Admin Group

Joined: 25 January 2003
Status: Offline
Points: 247

Post Options

Post Reply

Quote Webmaster

Report Post

Thanks(0)

Quote

Posted: 24 September 2011 at 18:38

Hi,

Just returned from holiday.

I have removed as much spam as I can see, but if you see any more can I ask you to re report it please.

H8jer, as I said in one of my other posts we have bought the upgrade already and now I am back from holiday (again as I said in my post) I will take a look at it.

Jonathan
Webmaster

H8jer

Admiral

Joined: 14 September 2010
Location: Denmark
Status: Offline
Points: 1503

Post Options

Post Reply

Quote H8jer

Report Post

Thanks(0)

Quote

Posted: 29 October 2011 at 08:12

hi jonathan

Is it an improvement to have this site "managed" through www.cloudflare.com?
To day there are many posts that include some code with reference to cloudflare.
When you read about cloudflare, it is stated, that visitors get fast pipelines.
http://www.maxmind.com/app/locate_demo_ip?ips=199.27.135.40
OK but, I need first to go from Denmark to San Francisco, where cloudflare looks to be.
Cloudflare also tries to prevent bots and spam. Ok, they ar not good enough...

If you have newest forum version, you might not need services like Cloudflare.

Edited by H8jer - 29 October 2011 at 08:14

Hanse 370#487 30HP 3-cabin

Webmaster

Admin Group

Joined: 25 January 2003
Status: Offline
Points: 247

Post Options

Post Reply

Quote Webmaster

Report Post

Thanks(0)

Quote

Posted: 29 October 2011 at 10:46

Hi H8jer,

OK, could of points...

New forum version is still on my to do list and I will get around to it before the new year....

Second is about Cloudflare. Cludflare offers us two things.

Firstly they offer us threat management. This blocks or challenges people who are seen as threats to the site. These are not just spammers but also hackers etc. So over the last 7 days we have blocked or challenged just over 650 users. Beyond doubt that is a good thing.

Secondly they offer a distributed DNS and CDN network. The example you have given of them being in San Francisco is not actually correct. If you where to do a full trace route on traffic then you would actually find that the traffic was probably coming partly from our server and partly from a CDN in Paris (probably closest to you). This is because they use Anycast. There is full explanation of this on their blog http://blog.cloudflare.com/a-brief-anycast-primer if you are interested in how it works.

Thanks

Jonathan

samba

Captain

Joined: 24 December 2007
Location: Netherlands
Status: Offline
Points: 234

Post Options

Post Reply

Quote samba

Report Post

Thanks(0)

Quote

Posted: 29 October 2011 at 12:45

Hi Jonathan,

First of all I would like to thank you for hosting this excellent forum. It is a great source of information.

My background is in the IT industry and we see that lot's of companies are using a Software as a Service model. This means you can use the software but someone else hosts and maintains it. The big advantage is that you don't have to put any time in maintaining / securing the forum. Of course you would still be the admin/owner of the forum but you don't have the technical hassle.

I see that webwiz also offer a SaaS solution see http://www.webwiz.co.uk/web-wiz-forums/forum-hosting.htm .

I am pretty sure that the forum members are willing to donate some money to pay for this service. Hosting starts at 5,87 per month. In most cases a SaaS solution is cheaper than hosting it yourself.

graemefromdownu View Drop Down

Captain

Joined: 01 July 2009
Location: United Kingdom
Status: Offline
Points: 217

Post Options

Post Reply

Quote graemefromdownu

Report Post

Thanks(0)

Quote

Posted: 30 October 2011 at 20:26

Hi, just a private query. Can you correct the spelling in the line below, not a serious problem but just like the rest of the world to know you run a tight ship!

f you no-longer (NO LONGER?) wish to recieve (RECEIVE) email notification for this Topic or Forum click on the link below

Thanks for a great site that has been of immense use to me the last 4 years.
< ="text/" ="//ajax.cloudflare.com/cdn-cgi/nexp/v=49212922/apps1.min.js">__CF.AJS.init1();

461: Dreamtime Wanderer, on her way to Australia.

skipper

Vice Admiral

Joined: 16 February 2008
Location: Sweden
Status: Offline
Points: 825

Post Options

Post Reply

Quote skipper

Report Post

Thanks(0)

Quote

Posted: 11 November 2011 at 12:52

When will we have a basic security feature to prevent "false user accounts"?

Besides the standard checks like type in some alfanumeric characters from an "image" displayed on the screen we could receive an activation code in an email to the defined email address in the user profile.

Some web forums use SMS to send an activation code, maybe that is possible to do for free via some free "SMS service" in internet.

There could be other methods as well for example rely on Google/Facebook user accounts.

Edited by skipper - 11 November 2011 at 12:52

Cheers,
Skipper
Former owner of Hanse 342 2005 (Sparcraft mast, white hull, wheel steering, deep draft keel, short rudder)



Welcome to myHanse.com the forum for Hanse Yachts owners throughout the world.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
H8jer Members Profile Send Private Message Find Members Posts Add to Buddy List Admiral Joined: 14 September 2010 Location: Denmark Status: Offline Points: 1503	Post Options Post Reply Quote H8jer Report Post Thanks(0) Quote Reply Posted: 09 September 2011 at 17:00
	No Problem with picture upload with Google Chrome
	Hanse 370#487 30HP 3-cabin

Peter-Blake Members Profile Send Private Message Find Members Posts Add to Buddy List Admiral of the Fleet Joined: 04 March 2008 Status: Offline Points: 2471	Post Options Post Reply Quote Peter-Blake Report Post Thanks(0) Quote Reply Posted: 20 September 2011 at 08:25
	It seems that the update does´nt help to avoid spam. The last days there are many spam attacs to this site. Is there any possibility to set the spamfilter to a higher level?
	Blake 370

H8jer Members Profile Send Private Message Find Members Posts Add to Buddy List Admiral Joined: 14 September 2010 Location: Denmark Status: Offline Points: 1503	Post Options Post Reply Quote H8jer Report Post Thanks(0) Quote Reply Posted: 20 September 2011 at 12:52
	It is an advanced type of Spam. There could be a robot that can cheat the "user creation" or an attacker that injects directly into the database. This forum is running the "Web Wiz Forums ver. 8.04" which is insecure as I pointed out in november 2010. http://myhanse.com/forum_posts.asp?TID=4585&KW=&PID=36990#36990 There are others who have problems with massive spam problems using this version, for example: http://albufeira.com/forum/forum_posts.asp?TID=5999&PID=54066 I think there is someyone in China who earn money by making mass entries in the insecure Web Wiz Forums versions http://www.securityfocus.com/bid/46131 To avoid this spam problem, I see no other option than to upgrade to the latest version, which is not expensive!
	Hanse 370#487 30HP 3-cabin

Webmaster Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 25 January 2003 Status: Offline Points: 247	Post Options Post Reply Quote Webmaster Report Post Thanks(0) Quote Reply Posted: 24 September 2011 at 18:38
	Hi, Just returned from holiday. I have removed as much spam as I can see, but if you see any more can I ask you to re report it please. H8jer, as I said in one of my other posts we have bought the upgrade already and now I am back from holiday (again as I said in my post) I will take a look at it. Jonathan Webmaster

H8jer Members Profile Send Private Message Find Members Posts Add to Buddy List Admiral Joined: 14 September 2010 Location: Denmark Status: Offline Points: 1503	Post Options Post Reply Quote H8jer Report Post Thanks(0) Quote Reply Posted: 29 October 2011 at 08:12
	hi jonathan Is it an improvement to have this site "managed" through www.cloudflare.com? To day there are many posts that include some code with reference to cloudflare. When you read about cloudflare, it is stated, that visitors get fast pipelines. http://www.maxmind.com/app/locate_demo_ip?ips=199.27.135.40 OK but, I need first to go from Denmark to San Francisco, where cloudflare looks to be. Cloudflare also tries to prevent bots and spam. Ok, they ar not good enough... If you have newest forum version, you might not need services like Cloudflare. Edited by H8jer - 29 October 2011 at 08:14
	Hanse 370#487 30HP 3-cabin

Webmaster Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 25 January 2003 Status: Offline Points: 247	Post Options Post Reply Quote Webmaster Report Post Thanks(0) Quote Reply Posted: 29 October 2011 at 10:46
	Hi H8jer, OK, could of points... New forum version is still on my to do list and I will get around to it before the new year.... Second is about Cloudflare. Cludflare offers us two things. Firstly they offer us threat management. This blocks or challenges people who are seen as threats to the site. These are not just spammers but also hackers etc. So over the last 7 days we have blocked or challenged just over 650 users. Beyond doubt that is a good thing. Secondly they offer a distributed DNS and CDN network. The example you have given of them being in San Francisco is not actually correct. If you where to do a full trace route on traffic then you would actually find that the traffic was probably coming partly from our server and partly from a CDN in Paris (probably closest to you). This is because they use Anycast. There is full explanation of this on their blog http://blog.cloudflare.com/a-brief-anycast-primer if you are interested in how it works. Thanks Jonathan

samba Members Profile Send Private Message Find Members Posts Add to Buddy List Captain Joined: 24 December 2007 Location: Netherlands Status: Offline Points: 234	Post Options Post Reply Quote samba Report Post Thanks(0) Quote Reply Posted: 29 October 2011 at 12:45
	Hi Jonathan, First of all I would like to thank you for hosting this excellent forum. It is a great source of information. My background is in the IT industry and we see that lot's of companies are using a Software as a Service model. This means you can use the software but someone else hosts and maintains it. The big advantage is that you don't have to put any time in maintaining / securing the forum. Of course you would still be the admin/owner of the forum but you don't have the technical hassle. I see that webwiz also offer a SaaS solution see http://www.webwiz.co.uk/web-wiz-forums/forum-hosting.htm . I am pretty sure that the forum members are willing to donate some money to pay for this service. Hosting starts at 5,87 per month. In most cases a SaaS solution is cheaper than hosting it yourself.

graemefromdownu Members Profile Send Private Message Find Members Posts Add to Buddy List Captain Joined: 01 July 2009 Location: United Kingdom Status: Offline Points: 217	Post Options Post Reply Quote graemefromdownu Report Post Thanks(0) Quote Reply Posted: 30 October 2011 at 20:26
	Hi, just a private query. Can you correct the spelling in the line below, not a serious problem but just like the rest of the world to know you run a tight ship! f you no-longer (NO LONGER?) wish to recieve (RECEIVE) email notification for this Topic or Forum click on the link below Thanks for a great site that has been of immense use to me the last 4 years. < ="text/" ="//ajax.cloudflare.com/cdn-cgi/nexp/v=49212922/apps1.min.js">__CF.AJS.init1();
	461: Dreamtime Wanderer, on her way to Australia.

skipper Members Profile Send Private Message Find Members Posts Add to Buddy List Vice Admiral Joined: 16 February 2008 Location: Sweden Status: Offline Points: 825	Post Options Post Reply Quote skipper Report Post Thanks(0) Quote Reply Posted: 11 November 2011 at 12:52
	When will we have a basic security feature to prevent "false user accounts"? Besides the standard checks like type in some alfanumeric characters from an "image" displayed on the screen we could receive an activation code in an email to the defined email address in the user profile. Some web forums use SMS to send an activation code, maybe that is possible to do for free via some free "SMS service" in internet. There could be other methods as well for example rely on Google/Facebook user accounts. Edited by skipper - 11 November 2011 at 12:52
	Cheers, Skipper Former owner of Hanse 342 2005 (Sparcraft mast, white hull, wheel steering, deep draft keel, short rudder)