PDA

View Full Version : Oh fucking arse!

Rosie
12-01-05, 09:49 AM
Password Sentry disables passwords for my site at a normal rate of one or two a month. So far this morning I've lost six of them and looking at the "log-in log" it looks like I'm going to loose at least another dozen or so within the next couple of hours.

Advise from anyone would be appreciated on what is happening and how I can stop it before all my members are disabled?
SGS
12-01-05, 10:04 AM
Password Sentry disables passwords for my site at a normal rate of one or two a month. So far this morning I've lost six of them and looking at the "log-in log" it looks like I'm going to loose at least another dozen or so within the next couple of hours.

Advise from anyone would be appreciated on what is happening and how I can stop it before all my members are disabled?

Get rid of Password Sentry. Seriously, its complete and utter shit and there are *FAR* better options out there now for very little money. Both Pennywize and Password Sentry are crap at keeping out script kiddies and all they manage to do is piss of good paying members.
Rosie
12-01-05, 10:07 AM
Get rid of Password Sentry. Seriously, its complete and utter shit and there are *FAR* better options out there now for very little money. Both Pennywize and Password Sentry are crap at keeping out script kiddies and all they manage to do is piss of good paying members.

Any opinions on Strongbox SGS? Seems like it has some decent features.
SGS
12-01-05, 10:12 AM
Any opinions on Strongbox SGS? Seems like it has some decent features.

Both Strongbox and Proxypass are worth their weight in gold and the new one from NATS looks good too. Just a bit of a questionmark over the speed of Strongbox support (which is why we use Proxypass on our big load balance) but the days of trying to keep out anyone but good customers with PW and PS are long gone.
Rosie
12-01-05, 12:19 PM
Just signed up to strongbox, unfortunely after you submit your order it tells you it usually takes 2-3 days to process the order. In the meantime my members continue to be disabled :(
Cardinal_Sin
12-01-05, 01:01 PM
Just signed up to strongbox, unfortunely after you submit your order it tells you it usually takes 2-3 days to process the order. In the meantime my members continue to be disabled :(


With so many passes out, can your pass file be seen from the web? Make sure this file is below the www level directory -
Also - Bit of a sod having to do this, but make sure each blocked pass is removed from the pass file (sentry and pennywize both unblock a pass after X time) and then re-issue each member with new ones - Otherwise you will have the same passes out again time and time again -
Also - Look through your stats to see where the freeloaders are coming from - And block those sites as referrers - (You can make a load of cash out of the failed loggins now - Re-direct all of this scum traffic to a traffic trade or just sell it)
JT
12-01-05, 01:10 PM
(You can make a load of cash out of the failed loggins now - Re-direct all of this scum traffic to a traffic trade or just sell it)

:agree: This is something Ive been saying for ages and the exact reason I dont use strong box. Its too good.

With pennywize I can create a ton of sign free quality traffic, often from a surfer who has tried to get access to dozens of sites and failed and so is horny as hell
Rosie
12-01-05, 01:32 PM
I see what you mean JT and Cardinal - I'm just pissed off that so many of my members have had their passwords disabled today, probably by no fault of their own. Now I need to go through the logs and reset all their password and mail 'em all.
Joe A
12-01-05, 04:23 PM
Rosie..

It's a doddle to deal with..

Go in to CCBill admin and change the passord to one like this "F1z4Gh" then email the member with their new log in details. Too many surfers use plain lower case passwords which are easy to crack.

Also, if you have a cp with you host, go in to the raw logs and see where the hits are coming from. These are usually from a password site and ban the ip. When I had to move SGD to a new host/server, I spent the first week going throught the raw logs etc. and denied a lot of ip's. The only prob was that some were shared and a few members lost access for a short while... LOL. I found NTL was the biggest prob for losing good members :(