Announcement

Collapse
No announcement yet.

HELP! Banned forum member is trying to damage my site...

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • HELP! Banned forum member is trying to damage my site...

    A few weeks ago my vB's moderators and I had to deal with a member who was posting obscene messages to the forums and generally causing trouble. I banned his account, and forwarded evidence of his actions to his ISP in Australia - but they have so far not responded or taken any action.

    A few days after his first banning, he began opening new member accounts... one or two per week, every week for about a month. Each time we caught him in the act, and eventually decided that blocking his IP range would be the next step - and while I know that in itself is not fool proof, it has stopped him trying to get onto the forums.

    But now he's attacking the site in a different way, by sending me emails with virus attachments to my account's mailbox. While this is not too much hassle because my anti-virus software always stops them, it now looks as if he is attempting to send the same kind of emails to other people/businesses using my email address in his mail client. I know this, because the mail server *thankfully* keeps sending me failure of delivery notices, which clearly have this guy's IP details (as opposed to mine) in the failed e-mail's headers.

    The question is: what can I do to stop this guy? I have reported his actions to his ISP on two separate occasions now to no avail whatsoever. I have also sent a stack of evidence to Yahoo - because I have worked out that he has at least ten separate mailboxes with them through his multiple registrations to my site.

    I am somewhat confident that his actions are not doing any actual damage at the moment (Exim's virus-checking measures seem to be pretty strict), but still - he is trying to send viruses to other people and then make it look as if they are coming from our domain, which could open up a whole hornet's nest of trouble for me and my site if something DOES get through.

    Can anybody help or suggest the best course of action to put a stop to this jerk?

  • #2
    Is he sending them through your SMTP server? You need to make sure your server is not acting as an open relay allowing anyone to use it.

    Comment


    • #3
      It would probably cost a relative fortune but you could try getting a rep from the ISP actually on the phone so you can talk to a live person.
      --filburt1, vBulletin.org/vBulletinTemplates.com moderator
      Web Design Forums.net: vB Board of the Month
      vBulletin Mail System (vBMS): webmail for your forum users

      Comment


      • #4
        Go here and test your server to see if it's letting through relayed mails:
        http://www.abuse.net/relay.html


        This is what I got when I ran your domain through it:


        Mail relay testing
        Connecting to leatherforums.com for anonymous test ...
        <<< 220-metroid.vosn.net ESMTP Exim 3.35 #1 Fri, 16 Aug 2002 08:28:30 -0600
        <<< 220-We do not authorize the use of this system to transport unsolicited,
        <<< 220 and/or bulk e-mail.
        >>> HELO www.abuse.net
        <<< 250 metroid.vosn.net Hello www.abuse.net [208.31.42.77]


        Relay test 1
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<[email protected]>
        <<< 250 <[email protected]> is syntactically correct
        >>> RCPT TO:<[email protected]>
        <<< 550-Host www.abuse.net [208.31.42.77] is not permitted
        <<< 550-to relay through metroid.vosn.net.
        <<< 550-Perhaps you have not logged into the pop/imap server in the last 30 minutes.
        <<< 550-You may also have been rejected because your ip address
        <<< 550-does not have a reverse DNS entry.
        <<< 550 relaying to <[email protected]> prohibited by administrator

        Relay test 2
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<spamtest>
        <<< 501 <spamtest>: sender address must contain a domain

        Relay test 3
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<>
        <<< 250 <> is syntactically correct
        >>> RCPT TO:<[email protected]>
        <<< 550-Host www.abuse.net [208.31.42.77] is not permitted
        <<< 550-to relay through metroid.vosn.net.
        <<< 550-Perhaps you have not logged into the pop/imap server in the last 30 minutes.
        <<< 550-You may also have been rejected because your ip address
        <<< 550-does not have a reverse DNS entry.
        <<< 550 relaying to <[email protected]> prohibited by administrator

        Relay test 4
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<[email protected]>
        <<< 250 <[email protected]> is syntactically correct
        >>> RCPT TO:<[email protected]>
        <<< 550-Host www.abuse.net [208.31.42.77] is not permitted
        <<< 550-to relay through metroid.vosn.net.
        <<< 550-Perhaps you have not logged into the pop/imap server in the last 30 minutes.
        <<< 550-You may also have been rejected because your ip address
        <<< 550-does not have a reverse DNS entry.
        <<< 550 relaying to <[email protected]> prohibited by administrator

        Relay test 5
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<[email protected][209.197.233.188]>
        <<< 250 <[email protected][209.197.233.188]> is syntactically correct
        >>> RCPT TO:<[email protected]>
        <<< 550-Host www.abuse.net [208.31.42.77] is not permitted
        <<< 550-to relay through metroid.vosn.net.
        <<< 550-Perhaps you have not logged into the pop/imap server in the last 30 minutes.
        <<< 550-You may also have been rejected because your ip address
        <<< 550-does not have a reverse DNS entry.
        <<< 550 relaying to <[email protected]> prohibited by administrator

        Relay test 6
        >>> RSET
        <<< 250 Reset OK
        >>> MAIL FROM:<[email protected]>
        <<< 250 <[email protected]> is syntactically correct
        >>> RCPT TO:<relaytest%[email protected]>
        <<< 250 <relaytest%[email protected]> is syntactically correct

        Relay test result
        Hmmn, at first glance, host appeared to accept a message for relay.
        THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY.
        Well, there it is.
        - Keeper of the Grove

        Comment


        • #5
          Thanks for the quick replies

          I am going to write to VenturesOnline (my hosts) and see what they say about the situation. I rather foolishly overlooked the possibility that he might be using our site's SMTP server -- I figured he was just using my address as an identity in his email client. D'oh!!!!

          I am amazed at the audacity of this person. He walks over just about every rule in the site's terms and conditions, behaving like the sick pervert that he was at every opportunity, gets warned plenty of times by the mods and I, even then we continually gave him another chance. Finally we ban him, and he still won't go away. We even had a thread going for a few weeks were everyone was cheering that he had gone. We ban him six more times after that (sneakily thought he could re-register unnoticed!), and then finally I block his access altogether. Now he's trying to damage the site's reputation by spreading viruses through our email.

          I am usually not one to bear a grudge, but I really would like to have this person taken to the cleaners. Off-topic slightly perhaps, but how have other vB admins dealt with trouble-making members who just won't take the hint and go away?

          Comment


          • #6
            Originally posted by Mark0380
            Off-topic slightly perhaps, but how have other vB admins dealt with trouble-making members who just won't take the hint and go away?
            Banned the person, then deleted him and all the accounts he created, and banned him and the anonymous proxy he ended up using. He was not very good at coming back, his writing style was blatantly obvious each time.
            --filburt1, vBulletin.org/vBulletinTemplates.com moderator
            Web Design Forums.net: vB Board of the Month
            vBulletin Mail System (vBMS): webmail for your forum users

            Comment


            • #7
              I tested the leatherforums.com mailserver - it's clean - doesn't relay
              http://forums.cpfc.org/

              Comment


              • #8
                I just tested leatherforums.com at http://www.abuse.net/relay.html, and this is the last part of what I got...
                Relay test 6
                >>> RSET
                <<< 250 Reset OK
                >>> MAIL FROM:<[email protected]>
                <<< 250 <[email protected]> is syntactically correct
                >>> RCPT TO:<relaytest%[email protected]>
                <<< 250 <relaytest%[email protected]> is syntactically correct

                Relay test result
                Hmmn, at first glance, host appeared to accept a message for relay.
                THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY.

                Some systems appear to accept relay mail, but then reject messages internally rather than delivering them, but you cannot tell at this point whether the message will be relayed or not.

                You cannot tell if it is really an open relay without sending a test message; this anonymous user test DID NOT send a test message.
                How do you know for sure, that leatherforums.com is okay? I think it might not be... according to this test.
                Last edited by mishkan; Fri 16 Aug '02, 12:27pm.

                Comment


                • #9
                  Originally posted by Mark0380
                  Off-topic slightly perhaps, but how have other vB admins dealt with trouble-making members who just won't take the hint and go away?
                  Sometimes we have fun with the user. We'll remove all forum access EXCEPT for our testing forum, or we'll simply change them to be a "Unregistered/Not Logged In" or "COPPA user awaiting authorization." When it's someone who's flagrantly broken the rules, we ban the email address, the IP, and remove ALL forum access masks. That usually helps, except for those on AOL and other ISP's that have changing IP addresses. We've had to block a few IP ranges in that instance.

                  Comment


                  • #10
                    Originally posted by mishkan
                    I just tested leatherforums.com at http://www.abuse.net/relay.html, and this is the last part of what I got...

                    How do you know for sure, that leatherforums.com is okay? I think it might not be... according to this test.
                    I telnet'd to your server and tried

                    220-metroid.vosn.net ESMTP Exim 3.35 #1 Fri, 16 Aug 2002 14:53:55 -0600
                    220-We do not authorize the use of this system to transport unsolicited,
                    220 and/or bulk e-mail.
                    http://forums.cpfc.org/

                    Comment


                    • #11
                      also, add this to the Banning Options -> IPs to ban: in your vbulletin options part of the admin cp . this will block alot of public proxy servers that he can use to get back to your forums (even with his ip banned)


                      dnai-216-15-34-70.cust.dnai.com:80
                      barto.blinncol.edu:8080
                      64.132.101.201:8080
                      216.125.41.2:80
                      207.2.54.2:80
                      machinetransport.com:80
                      157.91.107.42:8080
                      12.34.48.126:80
                      12.34.48.129:8080
                      206.8.102.102:80
                      216.102.13.21:80
                      64.132.101.212:8080
                      proxy.ia2.marketscore.com:80
                      216.101.117.161:8000
                      63.238.139.7:80
                      64-93-37-226.client.dsl.net:80
                      216.167.107.64:8080
                      cmas-tj.cablemas.com:8080
                      207.225.81.150:80
                      12.34.48.129:80
                      webmail.mail-ahoy.com:8000
                      64.166.74.5:8080
                      66.64.3.154:80
                      206.58.182.99:80
                      216-210-163-62.atgi.net:8080
                      208.144.37.7:80
                      12.34.48.126:8080
                      wsip68-15-137-132.hr.hr.cox.net:80
                      ensait19.ensait.fr:80
                      ipd50a24c0.speed.planet.nl:3128
                      proxy.hs-bremerhaven.de:8080
                      ot0-69.biwa.ne.jp:80
                      mailgate.gerrardcars.co.uk:3128
                      168.11.49.5:8080
                      148.74.255.104:80
                      AS7000_1B.sfn.co.jp:8080
                      ns.dainichi-el.co.jp:80
                      209.3.144.105:8080
                      ado.com.mx:80
                      210.145.17.38:8080
                      207.35.39.100:80
                      200.23.209.209:8080
                      200.34.247.181:80
                      204.60.171.225:80
                      206.13.80.4:80
                      ns.mmko.co.jp:8080
                      216.112.227.130:8080
                      www.stdavid.org:8080
                      63.167.108.38:8080
                      volun.center-mie.or.jp:80
                      trojan.gjsd.k12.pa.us:80
                      amuro.kcg.co.jp:80
                      200.23.209.209:80
                      nt-server.trsinc.org:80
                      64.109.68.66:3128
                      filter1.sctelcom.net:80
                      port20.net106.bignet.net:80
                      206.228.51.3:80
                      206.105.71.2:80
                      213.254.184.211:80
                      2.monfoyer.co.jp:80
                      host104-139.urbana.edu:80
                      mail.otsg.com:80
                      209.3.144.105:80
                      marvin.cc.fer.hr:80
                      north.fujicolor-hokuyo.co.jp:8080
                      mh.sci-tennis.net:80
                      www.kan-shoku.co.jp:80
                      64-204-113-98.client.dsl.net:8080
                      209.11.25.1:80
                      207.232.162.139:80
                      207.62.41.10:80
                      pc2.setoimanamoihcim-unet.ocn.ne.jp:80
                      cache1.qsi.net.nz:80
                      193.164.99.165:80
                      211.76.98.230:8080
                      wall.nisso-x.co.jp:80
                      204.184.137.1:80
                      216.235.32.126:80
                      tt.tech-t.co.jp:80
                      216-55-142-30.dsl.san-diego.abac.net:3128
                      ns.cyberlinks-jp.com:80
                      202.85.177.223:80
                      melcache01.powertel.net.au:80
                      200.75.211.35:80
                      204.185.138.59:80
                      mail.sd242.k12.id.us:80
                      211.15.62.123:8000
                      209.152.98.155:80
                      207.225.63.2:8080
                      209.88.144.24:8080
                      148.206.101.5:80
                      2.magicbird.co.jp:80
                      cm61-10-4-130.hkcable.com.hk:80
                      210.145.17.38:8180
                      208.9.78.77:80
                      202.81.246.7:80
                      210.145.17.38:8280
                      194.78.144.179:8080
                      210.166.174.123:80
                      node18673.a2000.nl:3128
                      202.85.153.194:8080
                      211.17.150.163:80
                      63.162.212.2:80
                      195.53.49.197:80
                      193.5.163.239:8080
                      210.163.167.162:80
                      64.3.183.163:8080
                      193.164.99.105:80
                      200.23.182.26:80
                      cncldns1srv.council.net:80
                      64.5.220.82:80
                      216.208.168.2:80
                      209.187.235.30:80
                      home.fr.clara.net:8080
                      212.147.107.28:8080
                      202.39.225.81:8080
                      202.106.169.20:80
                      sv.jtcam.co.jp:80
                      204.196.104.27:80
                      www.jcn.co.jp:80
                      194.209.157.111:80
                      194.106.137.20:80
                      www.desoto.k12.la.us:80
                      200.38.161.34:80
                      207.232.181.253:8080
                      208.233.33.11:80
                      195.53.255.242:80
                      eclipse-1.richmond.k12.nc.us:80
                      servidor1.eternit.com.co:80
                      210.239.155.132:8080
                      193.52.220.2:80
                      195.171.209.195:8080
                      www.n-highschool.net:80
                      212.80.166.163:80
                      217-5-32-212.winkwll.ll.ftech.net:80
                      195.94.201.158:80
                      203.102.215.227:80
                      dns1.koibuchi.ac.jp:80
                      silainiai.failanas.lt:8080
                      193.15.176.34:8000
                      194.79.171.67:80
                      dns.lpgc.or.jp:80
                      212.97.164.130:8080
                      195.243.124.114:80
                      210.255.168.50:80
                      dns1.sgrl.org:80
                      adsl-63-194-179-202.dsl.snfc21.pacbell.net:80
                      195.223.151.7:80
                      ftp.orange.uk.com:8000
                      heidpark.be:80
                      mail.komvux.partille.se:80
                      kitaro.webserve.ne.jp:80
                      213.8.66.227:80
                      196.40.22.179:80
                      209.227.71.72:80
                      195.68.114.2:8080
                      proxy.ozemail.com.au:8080
                      mail.allanboyle.co.nz:80
                      62.159.159.114:8080
                      200.41.234.241:80
                      dns2.mdsnet.it:80
                      203.151.40.4:80
                      163.29.26.60:8080
                      mail.ism-sa.fr:8080
                      211.20.195.43:3128
                      212.143.137.12:80
                      61.137.78.78:80
                      217.59.205.26:3128
                      203.53.209.66:80
                      mail.kantor.gr:80
                      202.138.200.18:80
                      211.20.195.43:80
                      218.44.151.218:80
                      193.95.25.22:80
                      203.41.81.65:80
                      195.3.110.122:80
                      proxy.bashedu.ru:8080
                      202.190.118.20:8080
                      internet-server.ebf.com.br:80
                      200.195.52.193:80
                      194.78.16.73:8000
                      200-168-28-78.dsl.telesp.net.br:6588
                      203.185.212.10:80
                      209.88.62.54:80
                      218.44.134.139:80
                      202.28.68.18:80
                      212.205.150.5:80
                      proxy.digitelone.com:8080
                      212.244.182.67:80
                      AToulouse-201-2-1-35.abo.wanadoo.fr:80
                      customer-148-235-65-65.uninet.net.mx:80
                      proxy.dmn.com.au:8080
                      proxy.digitelone.com:80
                      203.154.206.18:8080
                      200.242.216.150:3128
                      211.100.0.34:80
                      195.53.242.35:80
                      200.24.4.235:80
                      namesn.wadakogyo.co.jp:8080
                      194.229.165.179:80
                      proxy.ual.es:3128
                      200.14.253.245:80
                      217.144.0.5:80
                      213.32.49.5:80
                      202.28.95.1:80
                      195.56.183.77:80
                      210.196.156.202:80
                      63.107.245.2:3128
                      195.226.230.67:80
                      211.99.29.226:8080
                      206.28.59.106:80
                      195.57.8.133:80
                      212.35.243.2:8080
                      210.235.125.65:80
                      195.226.230.66:80
                      61.142.169.98:80
                      211.100.0.34:8088
                      fw-serv2.vogel-lube.com:80
                      svr1.nms.ne.jp:80
                      193.91.205.91:3128
                      195.68.114.9:8080
                      195.255.125.82:80
                      node15b21.a2000.nl:3128
                      200.75.42.4:80
                      212.77.192.17:80
                      212.80.166.163:8080
                      195.70.242.210:8080
                      200.13.225.220:8080
                      mail.cla.gov.tw:80
                      62.161.141.23:80
                      212.137.21.169:80
                      ns.proserv.co.jp:80
                      adsl-63-198-132-140.dsl.lsan03.pacbell.net:3128
                      ns.taiyoshoji.co.jp:80
                      mail.cotecna.com.pe:80
                      mail.gedrat.net:80
                      dsl-64-130-207-133.telocity.com:8080
                      wall.golf.bs-sports.co.jp:80
                      mail.koibuchi.ac.jp:80
                      awhina.rnzfb.org.nz:80
                      63.98.0.177:80
                      www.childrenpalace.edu.vn:3128
                      sealperu.com:80
                      200.203.159.2:80
                      207.225.63.2:80
                      211.236.159.150:8080
                      210.175.52.100:8080
                      enteleca-2.dsl.easynet.co.uk:80
                      ns.tcj-t.co.jp:80
                      193.49.167.147:80
                      194.65.77.1:80
                      211.20.195.43:8080
                      TSE-SERVER-DNS.tse-net.co.jp:80
                      194.206.1.44:80
                      ns.t-artworks.com:80
                      6gym-kalam.mes.sch.gr:80
                      server.shepherd.k12.mt.us:80
                      202.28.68.18:8080
                      pandora.teimes.gr:8080
                      dns.jdm.ne.jp:80
                      lion.kk-tack.co.jp:80
                      131.165.109.34:80
                      211.236.159.134:8080
                      ftp0.plato.co.jp:80
                      192.117.167.145:80
                      217.89.45.74:8080
                      210.243.4.6:80
                      203.199.64.132:8080
                      202.129.20.8:80
                      novagweb.novag.com.mx:80
                      216-24-57-100.win.net:80
                      204.184.252.121:80
                      164.58.28.250:80
                      ns.shirakabaso.com:80
                      r207.3.119-18.adinet.com.uy:80
                      station13.mdsl.com.lb:8080
                      4lyk-tripol.ark.sch.gr:80
                      217.89.43.98:8080
                      209.27.61.36:80
                      210.196.156.203:80
                      196.40.43.34:80
                      dns1.fj-net.co.jp:80
                      ns.komzg.co.jp:80
                      210.12.103.24:3128
                      sv1.ura.co.jp:80
                      202.106.102.85:8080
                      196.40.9.146:80
                      217.57.155.254:80
                      211.75.54.10:3128
                      202.110.225.196:80
                      194.90.133.201:80
                      195.22.199.146:3128
                      200.199.249.66:80
                      200.35.89.146:8080
                      202.103.37.101:3128
                      200.44.56.110:80
                      200.241.164.67:80
                      adsl-63-204-68-202.dsl.scrm01.pacbell.net:80
                      168.187.156.241:8080
                      ip-dns.mckinley.co.jp:8080
                      210.190.110.13:80
                      202.9.145.106:8080
                      dns1.town.nakajima.ehime.jp:80
                      node13a45.a2000.nl:3128
                      203.30.170.6:81
                      212.38.131.30:80
                      212.0.120.252:8080
                      is-server.kcs.ac.yu:80
                      server3.telekom.hr:80
                      195.22.169.129:80
                      202.9.170.161:8080
                      w130.z064002214.chi-il.dsl.cnc.net:3128
                      210.162.201.115:80
                      195.75.131.66:8080
                      200.231.33.233:80
                      203.93.222.250:80
                      202.9.170.161:80
                      203.200.75.165:80
                      195.130.88.40:80
                      203.58.25.15:80
                      www.nisshin-syouji.co.jp:80
                      ns.itac-ao.co.jp:80
                      216.72.63.198:8080
                      office.socrates.co.jp:80
                      63.112.134.2:80
                      202.9.136.40:8080
                      203.130.192.162:80
                      210.255.65.2:80
                      193.188.95.146:8080
                      63.109.255.6:80
                      196.37.155.66:80
                      2tee-lamias.fth.sch.gr:80
                      www.mccann.com.ve:80
                      202.9.136.40:80
                      sah2.ye:8080
                      194.78.66.68:8080
                      inet01.mr.undp.org:8080
                      203.197.39.238:80
                      203.82.192.2:8080
                      ns.ashikaga-jc-h.ed.jp:8080
                      61.133.71.205:8080
                      193.227.168.211:80
                      cage-e0.peoria.il.bwsys.net:80
                      203.43.65.211:80
                      213.29.92.10:3128
                      196.20.1.37:8080
                      211.0.82.51:80
                      202.77.116.14:80
                      mail.usclcargo.com.hk:80
                      202.148.3.65:8080
                      mail.dataform.it:80
                      ns.reuse.or.jp:80
                      proxy.druknet.net.bt:8080
                      proxy.urim.knet.co.il:80
                      intersv.musashiogose-h.ed.jp:80
                      200.241.73.130:8080
                      1sek1-kalam.mes.sch.gr:80
                      server.scheiber.sulinet.hu:80
                      ns.jukenkogyo.co.jp:80
                      192.117.177.142:80
                      195.42.143.23:3128
                      shimizu-e-intsv.town.shimizu.fukui.jp:80
                      202.28.37.4:80
                      195.22.230.28:8080
                      194.70.193.128:8080
                      210.175.125.34:80
                      ns.h-rc.co.jp:8080
                      210.254.8.52:8000
                      195.96.146.114:80
                      194.74.201.10:8080
                      61.152.212.248:80
                      213.29.15.102:3128
                      dns1.gifukogyo.co.jp:80
                      140.125.241.1:3128
                      dns1.sysrun.co.jp:80
                      www.qdh.or.jp:80
                      195.47.14.193:80
                      200.30.47.70:8080
                      200.30.47.70:80
                      client-d.visual-park.co.jp:80
                      211.20.68.74:80
                      mail1.found.co.jp:80
                      202.8.227.94:80
                      www.monolith-prime.co.jp:80
                      sdsl-64-7-12-211.dsl.chi.megapath.net:80
                      ns.tew-j.com:80
                      uptime-nt3.uptime.co.za:80
                      195.18.91.10:80
                      211.5.152.98:3128
                      dns.hartwell.co.jp:8080
                      server.erkel-bp.sulinet.hu:80
                      bmihms-s.ozemail.com.au:80
                      64.123.185.66:80
                      ras1.cssh.qc.ca:8080
                      mail.riddellsports.com:80
                      abeto.accion.com.mx:80
                      102.227.gdsl.nwc.net:80
                      server.feketei-ajka.sulinet.hu:80
                      61.143.6.68:3128
                      mail.microhard.co.za:8080
                      ns.ccccc5.com:80
                      proxy.parlacen.org.gt:80
                      dial43-227.movinet.com.uy:80
                      pc188.krebank.main-link.net:80
                      211.20.154.178:80
                      210.178.112.1:80
                      210.179.44.193:8000
                      211.34.192.250:80
                      211.35.78.36:80
                      ittgs002.ittkokusai.co.jp:80
                      211.35.78.36:8080
                      210.178.187.250:80
                      207.167.236.137:80
                      210.217.5.171:8080
                      cache.luanda.mstelcom.com:80
                      pbc.edu.gd:80
                      206.97.255.82:8080
                      203.37.71.14:80
                      211.21.41.2:3128
                      195.8.1.29:80
                      proxy.globalctg.net:8080
                      arado.ctejedor.com.ar:80
                      192.150.249.114:80
                      212.98.254.4:80
                      211.20.164.186:3128
                      mail.date.com.hk:80
                      lu3-isdn001.ats.it:80
                      2.amemuranet.co.jp:80
                      168.187.154.130:80
                      210.90.3.43:8080
                      202.29.4.252:8080
                      202.129.12.8:8080
                      195.3.81.47:80
                      210.249.97.251:80
                      250.211008164.ccn.ne.jp:80
                      210.74.254.35:80
                      211.75.40.186:80
                      202.9.145.106:80
                      194.204.236.195:8080
                      210.176.230.29:80
                      202.28.37.4:3128
                      202.39.21.122:80
                      195.146.49.17:80
                      10gym-laris.lar.sch.gr:80
                      211.75.52.106:3128
                      waroona.wa.edu.au:80
                      ns.factornet.co.jp:80
                      dhcp-130.fegs.org.ve:80
                      ns1.nissinhkltd.com.hk:80
                      200.44.121.34:80
                      normandintransit.com:80
                      210.145.104.3:8080
                      204.191.243.1:80
                      202.97.200.98:8080
                      192.116.162.68:80
                      tum-56k-158.tpgi.com.au:80
                      uni-comm.ca:80
                      ns.smmgnt.co.jp:8080
                      ns.21-zentsu.com:80
                      24.132.153.105:3128
                      server1.lavallette.k12.nj.us:80
                      211.0.113.202:80
                      dns.wit.pref.chiba.jp:8080
                      194.225.166.1:80

                      Comment


                      • #12
                        Originally posted by Anime-loo
                        this will block alot of public proxy servers that he can use to get back to your forums (even with his ip banned)
                        Except you need to separate the IPs with a space, not a line feed.

                        As with the email ban list, put a space between each IP number.
                        Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
                        Change CKEditor Colors to Match Style (for 4.1.4 and above)

                        Steve Machol Photography


                        Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


                        Comment


                        • #13
                          Originally posted by Anime-loo
                          also, add this to the Banning Options -> IPs to ban: in your vbulletin options part of the admin cp . this will block alot of public proxy servers that he can use to get back to your forums (even with his ip banned)


                          Where did you find that list?

                          Comment


                          • #14
                            Just to make sure, what you will need to do is register an account at abuse.net and have them try to relay a REAL email through your server. If you end up getting the test relay email then it means your server is definitely relaying. The anonymous test result I provided earlier was only preliminary.
                            Well, there it is.
                            - Keeper of the Grove

                            Comment


                            • #15
                              Originally posted by filburt1
                              Banned the person, then deleted him and all the accounts he created, and banned him and the anonymous proxy he ended up using. He was not very good at coming back, his writing style was blatantly obvious each time.
                              Your site has had 2 posts in the last week

                              Hail Mr. Popular!

                              Comment

                              widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                              Working...
                              X