Re: Coldfusion IP Host Banning - Need something stronger

2002-05-31 Thread Jason Miller

Thanks! - that is crazy - it may take them a while to figure it out.. Great solution - 
although seems really a severe
privacy policy issue

thanks again -
jay miller

Justin Scott wrote:

  And this works great. But I have some persistent users that I banned
  about 15 IP's for 1 person, banned any referrers from their host - and
  now he is signing on from AOL.

 You might log their CFID/CFTOKEN (this assumes you're using client/session
 mgmt of course) and check for that on each page load.  If the combo is
 listed in the DB, add the current IP to the ban list and redirect.  Of
 course if they are persistent, they will eventually figure it out and get
 around it.

 You might also do a search on Google for the super cookie.  If they're on
 Windows and have Media Player installed, some versions expose a custom ID
 that you can pull using JavaScript, assuming they haven't disabled it and
 they're running IE.

 Demo here: http://www.computerbytesman.com/privacy/supercookiedemo.htm

 -Justin Scott, Lead Developer
  Sceiron Internet Services, Inc.
  http://www.sceiron.com

 
__
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Coldfusion IP Host Banning - Need something stronger

2002-05-30 Thread Jason Miller

Hello all. I posted this 3 days ago - but never came through. Apologize
if a duplicate.

Hopefully this is not too off topic -
I am currently using coldfusion to check IP and refer host
for example -
cfloop index=IPnum list=#attributes.IPs# delimiters=,
cfif #remote_addr# is #IPnum#
cfif #attributes.method# is redirect
cflocation url=#attributes.redirect#

And this works great. But I have some persistent users that I banned
about 15 IP's for 1 person, banned any referrers from their host - and
now he is signing on from AOL.

I am sure some of you Cold Fusion pro's have had to come up with
something with a little more strength. Is this possible? Can I read a
particular setting from his machine and ban that? I need to ban this
certain group of people. They also seem to be unnecessarily bulk signing
up users through my forms and make a small dent in the bandwith.

Any help or direction is greatly appreciated!
Thanks,
jay miller
__
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists



Re: Coldfusion IP Host Banning - Need something stronger

2002-05-30 Thread Justin Scott

 And this works great. But I have some persistent users that I banned
 about 15 IP's for 1 person, banned any referrers from their host - and
 now he is signing on from AOL.

You might log their CFID/CFTOKEN (this assumes you're using client/session
mgmt of course) and check for that on each page load.  If the combo is
listed in the DB, add the current IP to the ban list and redirect.  Of
course if they are persistent, they will eventually figure it out and get
around it.

You might also do a search on Google for the super cookie.  If they're on
Windows and have Media Player installed, some versions expose a custom ID
that you can pull using JavaScript, assuming they haven't disabled it and
they're running IE.

Demo here: http://www.computerbytesman.com/privacy/supercookiedemo.htm

-Justin Scott, Lead Developer
 Sceiron Internet Services, Inc.
 http://www.sceiron.com


__
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists