mehashi Posted June 1, 2009 Share Posted June 1, 2009 Hey guys! Is this just me? If so please forgive my questioning!Invision Power services inc Ip's repeatedly flash up as a warning the entire time I am on this forum. Why is this? Does anyone else get this? I am a member of Ubuntu forums which uses the same kind of board as well as other forums, and never get a security warning at all. The only way I can view this board is to allow all http communication, something I absolutely do not like doing! I have found having http blocked only affects about 5% of sites, and that is usually for a good reason. So what is it that this board wants? My details? Cookies? Some log on info? It seems strange to me that a trusted place like this is requesting my http by unusual means. I do not mean to be a scare monger, I would just like to find out why this board flags up a security warning for me. If it is erroneous then I can work around the settings and sort it my end. I am currently using peerguardian 2 and AVG 8 on my windows machine if that helps solve the mystery? Usually I only block ads, spammers and data-harvesters from trying to communicate with my system so this is new for me to be blocked doing something that is legitimate.The block is happening when attempting to communicate with X.X.X.31:80 (invision power services http port) from X.X.X.64:1317 (my system unknown port). And from Invision to me (on several ports).Any help getting to the bottom of this is appreciated! ^_^b p.s. I know I can allow the IP permanantly without allowing all other http, but am still confused as to why this is neccesary ie - why/what is being blocked? Link to comment Share on other sites More sharing options...
justsomeguy Posted June 1, 2009 Share Posted June 1, 2009 I would try to examine the peerguardian software and see if you can find out why it's flagging this. I haven't used that software before. Link to comment Share on other sites More sharing options...
mehashi Posted June 1, 2009 Author Share Posted June 1, 2009 Yes I have sent them a ticket requesting a reason for Invisions IP being blocked but have had no reply yet. Sometimes IP ranges are marked as bad, rather than actual IP addresses, In these cases you can find false positives from IP's in the range that have nothing to do with the IP that was actually being targeted. Maybe this is the case?Othertimes however perfectly 'legitimate' companies try to access things they shouldn't or request information in a strange way and this quite rightly flags up a warning that the IP has been blocked. Many times this is a company collecting data 'relevant to the use of a site', but this data should surely be requested and not taken... If requested as per normal then the IP generally would not get blocked, like all my other forums!The problem is you are given the source IP, destination IP, an identifying name for the IP, the protocol being used and the time, which is great, but...No reason is given as to why a program is blocked that could help you figure out whether it is bad or a false positive, apart from googling the name or IP. All I get when I do that is results to do with a guy who had downloaded invision and wanted to block them from finding out, or details about the invision board system. Nothing about why they are being blocked (eg associations with other blocked networks like 'savvis' or anti-p2p groups - which is most common.). I should say that I am not on the wrong side of the law (eg I have not copied invision or anything and all my p2p stuff is open source applications, various versions of ubuntu, and freeware - all legal)For the time being I am allowing the IP temporarily to post here and navigate the forum. I need not do this on any other forum which is why it has attracted my attention. I have a pile of anti-stuff tools ready and waiting to pounce just in case! Hopefully this is just a false positive! ^.^ Link to comment Share on other sites More sharing options...
justsomeguy Posted June 1, 2009 Share Posted June 1, 2009 If the program depends on people flagging things as suspicious, it's possible that someone could have flagged this for some reason that only they know. As far as I know, the w3schools.invisionzone.com domain is hosted on the invision network, it's not actually a part of w3schools.com, so the IP block is applying to the invisionzone.com domain (but apparently not every subdomain if you're able to browse other forums on it). Link to comment Share on other sites More sharing options...
mehashi Posted June 1, 2009 Author Share Posted June 1, 2009 Yes this board is definately part of invision and their IP range and not w3schools. Well as I cannot find anything expressly telling me why this is being blocked I have put it in my temporary whitelist to allow it. None of my other security measures are going wild yet!Still this is the first false positive I have had if it is so!^.^*EDIT* Now that I think about it I have not checked all of invision's forums, maybe they host one that has been flagged, and the IP range is shared by this forum? Quite possible methinks... Link to comment Share on other sites More sharing options...
justsomeguy Posted June 1, 2009 Share Posted June 1, 2009 For what it's worth, in the 3 years I've been coming here I haven't found any security problems. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.