Author: D.Kerr (30 Nov 08 7:37pm)
I installed the following on Joomla 1.5.8
1. JSecure. Found it would not block any blacklisted sites until I changed the module name from 'secure' to 'com_secure' where the plugin references the component. Found this from a post on the original JSecure site. Now it is blocking but not logging anything.
2. httpbl latest (Sept 08) and bad behavior latest (Sept 08) installed okay but no sign of any logging. I need to run a trace and see if they are contacting honeypot with the API key but I assume they probably are. However, I can find nothing logged. Should there be something in the joomla logs? I guess so, but nothing found. I have tried the settings to use JSecure and also the settings to not use JSecure.
EDIT: I have done a TCPDUMP and when a connect request comes in, I can find no traffic out to check the HoneyPot. So, for some reason these two plugins do not seem to be working even though all appears otherwise fine. I'll have a trawl through the database to see if anything is recorded there.
3. However, I am a little confused. I assume JSecure is still needed? There is a brief comment that "logging now happens with JLog". It seems that JSecure is being discontinued but is it still used by the other two plugins?
EDIT: In what way is it supposed to work, if used? Are the other two plugins supposed to update the blacklist table and also put info into the log? I understand that httpbl and bad_behavior are supposed to be able to run standalone so my next experiment will be to uninstall JSecure as I am unlikely to be manually entering IPs, I had to modify it to make blacklisting work, the logging is not working and it seems to be stopped as a project. Perhaps removing it will make the other plugins work....
So, if someone could point me in the right direction, I would be grateful. I want to have httpbl and the bad behavior plugins but should I have or not have JSecure for them to work properly? Does logging work?
Post Edited (30 Nov 08 9:49pm)