Since it is quite possible for a user to mistype their password repeatedly it may be desirable to have DenyHosts prevent specific IP addresses from being added to /etc/hosts.deny. To address this issue, create a file named allowed-hosts in the WORK_DIR. Simply add an IP address, one per line. Any IP address that appears in this file will not be blocked. Additionally, as of v1.0.3, a valid hostname can also be placed in the allowed-hosts file.

Unfortunately because of recent spam activity we have been forced to (at least temporarily) block all IP addresses. If you would like to join our board we'd love to have you. Registered members are able to bypass this block because the block only stops annonymous posting. So, please contact TJ to get registered and we look forward to your participation on the board!

If your versions and configuration of sshd and tcp_wrappers sometimes/always log hostnames rather than IP addresses then you can have DenyHosts attempt to resolve each IP address in the allowed-hosts file in order to determine the corresponding hostname. In doing so, any host that matches either this resolved IP address or the hostname will not be blocked. Note: Depending on the number of entries in your allowed-hosts file, this operation can be network intensive but only at DenyHosts startup.

DenyHosts v0.8.0 (and greater) uses the configuration parameter LOCK_FILE which should point to some unique path. When DenyHosts is run initially it will attempt to create this file and record it's process id (pid). If it already exists, DenyHosts will exit indicating that DenyHosts is still running and the pid of the previous process. Upon exit, DenyHosts will delete the LOCK_FILE so that it will not interfere with other instances (such as another instance run from cron).

DenyHosts is a Python script that analyzes the sshd server log messages to determine what hosts are attempting to hack into your system. It also determines what user accounts are being targeted. It keeps track of the frequency of attempts from each host. Additionally, upon discovering a repeated attack host, the /etc/hosts.deny file is updated to prevent future break-in attempts from that host.

Yes, if there are addresses available. Please note that additional IP addresses are granted on an "as available" basis, and are not guaranteed. The number of available IP addresses is finite, and additional addresses beyond the first may need to be refused, recovered, or revoked by ResNet without advance notice. In all cases, there is a maximum of two additional IP address beyond the first which ResNet will provide.

Open Start/Run dialog and enter "cmd". Then at the command prompt enter "ipconfig". Another way to know the IP address of the computer is to move your mouse pointer over the Radmin server tray icon. It will show you the list of IP addresses.

Too many connection attempts from one IP address are automatically temporarily blocked. All other restrictions are handled through your ID.

The most common reasons for blocking accounts are cheating (e.g. by inflating one's ranking, ladder manipulation etc.) and abusive behaviour (harrassing others, spamming etc.). Blocked accounts are automatically removed after 12 months (just like inactive ones) and can be used for signing up anew. There is no way to have one's account unblocked before that period. IP addresses are usually blocked for people who continuously cheat or behave abusively.

Is your IP address blocked. We have 2 methods we recommend to get new IP addresses without using PROXIES as PROXIES do not work. If you use DSL you can reset your DSL modem similar to www.RemoteDSL.com's IP Blocking most DSL providers use PPPOE if so usually a reset of your modem will work. Or use Dial up as each time you log in and out you get a new IP Address, AdBomber can be made to do either of these. Cable modems to do not let you reset your IP address.

Yes, but this is the very nature of direct connections. BitWise bypasses the server, so your PC must know where to send the messages (i.e. what computer on the Internet). Without sharing your IP address, nobody could connect to you, and BitWise wouldn't be very useful at all. You can't have it both ways: you can't have direct connects and not reveal your IP address. Does revealing your IP address constitute an insecurity? We do not believe so.

The browser being used does not set the Host: HTTP header. The SERVER_NAME CGI variable is set from the Host: HTTP header, but only if this is set by the browser. (Note that this header is not set by Internet Explorer 2.0.) The IIS parameter ReturnUrlUsingHostName is not set. Set the registry parameter at W3SVC\Parameters\ReturnURLUsingHostName to allow using the fully qualified domain name of the local host. See the IIS documentation about the ReturnURLUsingHostName registry parameter.

In general, a static or dedicated IP address will only be available in conjunction with SSL. Please contact us at sales@cheaperwebhost.com with your needs.

For example, if you want to get the range for *.doubleclick.com. That is unfortunately not possible, since it is a feature of DNS, and only through DNS related to IP's. You have to use name lookup tools to find out the domain, and use the address range specified by the nameserver. This example is a very peculiar one. Last time I researched, some months ago, www.doubleclick.net has 16 different IP addresses, in 3 different subnets.

I run a number of Linux servers and I noticed that one of them was hacked into. Upon browsing my sshd log I noticed that the system was targeted for some time and eventually, somebody hacked out a password. Had I been using DenyHosts, that never would've happened (if only I had the foresight to write this script before my system was compromised!). I then looked at the logs of my other servers, and noticed hundreds of break-in attempts.

DenyHosts uses a simple configuration file. An example, denyhosts.cfg-dist is supplied in the distribution. This file should be copied to denyhosts.cfg and edited to match your system configuration.

Version 0.9.0 introduces daemon mode support. If you run DenyHosts with the --daemon flag, then DenyHosts will run constantly in the background. See the previous link for more details. In addition to the deamon mode, DenyHosts can also be run periodically from the command line. If you do not wish to use the daemon mode, then I recommend that DenyHosts be run from cron on a routine basis. DenyHosts is fairly lightweight and does not put an excessive drain on system resources.

Yes, there is a way to hide a portion of your hostname or IP address. Note that this is enabled by default for all users connecting to WoWIRC so unless you or your IRC client disables it, doing this manually should not be necessary.

for additional lists you can download them on the [http://peerguardian.sourceforge.net/lists/ sourceforge PG2 area] This section will go through some of the most common questions and problems regarding PeerGuardian 2.

You can specify some programs that will be able to access the Internet without any restrictions. And contrariwise, you can specify some programs which will not be able to access the Internet. For example, you can ban Internet chatting by blocking Internet access for the instant messenger. But you can also instruct iProtectYou not to check or block your E-mail program. Moreover, you can restrict some users to only a few specified programs to access the Internet.

Assuming that you have logrotate installed on your system and is configured to use the /etc/logrotate.d directory for it's configuration files then you can simply create a file, /etc/logrotate.d/denyhosts, edit it and save it. If you have a nonstandard DenyHosts installation then you will need to account for this yourself.

If you want all the edits of one IP to be attributed to an user, see How do I reassign edits from one user to another? above.

Maybe. There are some advantages to having a unique IP for your site. When you change servers, you can point your users to a new IP, so they don't have to wait for the domain name change to propagate. With a static IP, it can also be simpler to upload and test your site before transferring the domain name to a new server. Setting up SSL is also much simpler. You may also not want to share your IP with some sites that could lead to your site being banned by search engines or spam lists.

Some games require you to know the IP of your computer in order to play online. There is a Windows program called Winipcfg.exe that you can run to display the current TCP/IP settings. To run this program, click on the Start button and select the "Run..." option. Type in "winipcfg" in the box and press Enter. If your IP address is 0.0.0.0 then you are NOT connected to the Internet, no matter what any other software or hardware indicates.

How can I speed up Radmin in the remote screen mode? I use a slow (modem) connection between computers.