Comments on: Bad Behavior 2.1.1 and 2.0.36 Security Release http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/ The Web's premier link spam killer. Wed, 16 May 2012 15:16:49 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Michael Hampton http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1700 Michael Hampton Sun, 07 Nov 2010 19:50:09 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1700 Michael, please email me the Bad Behavior log entries corresponding to the blocked request. Michael, please email me the Bad Behavior log entries corresponding to the blocked request.

]]> By: Michael Linder http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1699 Michael Linder Sun, 07 Nov 2010 19:45:42 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1699 PS: The fix-it-yourself page is also blocked by Bad Behavior allegedly because my browser used a false User-Agent string. Here it is for IE8: User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C) Still, the same access error persists using Chrome, Safari for Windows or Firefox -- whether or not Kasperski is active. PS: The fix-it-yourself page is also blocked by Bad Behavior allegedly because my browser used a false User-Agent string.

Here it is for IE8: User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Still, the same access error persists using Chrome, Safari for Windows or Firefox — whether or not Kasperski is active.

]]> By: Michael Hampton http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1698 Michael Hampton Sun, 07 Nov 2010 19:16:47 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1698 The first thing to do is to use a current release of Bad Behavior. This release has been superseded. The first thing to do is to use a current release of Bad Behavior. This release has been superseded.

]]> By: Michael Linder http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1697 Michael Linder Sun, 07 Nov 2010 19:15:07 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1697 I've read the conversations above regarding googlebots, but still have a problem. When I "fetch as Googlebot" any of my WordPress 3.0.1 pages using Webmaster Tools, Bad Behavior rejects the Googlebot: "You claimed to be a major search engine, but you do not appear to actually be a major search engine." Turning off Bad Behavior eliminates the problem. I'm not using strict checking and am using your recommended minimim threat level settings. Not here to argue, but I'm looking for a solution. Can you help? I’ve read the conversations above regarding googlebots, but still have a problem.

When I “fetch as Googlebot” any of my WordPress 3.0.1 pages using Webmaster Tools, Bad Behavior rejects the Googlebot: “You claimed to be a major search engine, but you do not appear to actually be a major search engine.”

Turning off Bad Behavior eliminates the problem. I’m not using strict checking and am using your recommended minimim threat level settings.

Not here to argue, but I’m looking for a solution. Can you help?

]]> By: Bad Behavior / Bad Behaviour: Bad Behavior 2.0.37 and 2.1.3 http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1696 Bad Behavior / Bad Behaviour: Bad Behavior 2.0.37 and 2.1.3 Fri, 09 Jul 2010 05:18:02 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1696 [...] New in the 2.0.37 stable release (since 2.0.36): [...] [...] New in the 2.0.37 stable release (since 2.0.36): [...]

]]> By: Chris http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1695 Chris Tue, 29 Jun 2010 15:59:10 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1695 Aha. I didn't see the link to "Activate Bad Behavior Site Wide". Sorry if I wasted your time. Aha. I didn’t see the link to “Activate Bad Behavior Site Wide”. Sorry if I wasted your time.

]]> By: Michael Hampton http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1694 Michael Hampton Mon, 28 Jun 2010 17:39:49 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1694 Chris, WordPress MU (now WordPress 3.0) has changed significantly since that forum post. I now recommend you install it in plugins, and activate it site-wide (or just make it available for individual blogs) from the site admin plugins page. Chris, WordPress MU (now WordPress 3.0) has changed significantly since that forum post. I now recommend you install it in plugins, and activate it site-wide (or just make it available for individual blogs) from the site admin plugins page.

]]> By: Chris http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1693 Chris Wed, 23 Jun 2010 11:40:21 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1693 Michael I'm having trouble getting Bad Behavior to work with WordPress MU. Elsewhere you say that <a href="http://mu.wordpress.org/forums/topic/14537#post-88516" rel="nofollow">Bad Behavior should work if it is placed in mu-plugins or plugins</a>. How can I tell if it is working? If I place it in the plugins directory, it needs to be enabled on a blog-by-blog basis, which isn't ideal. If I place it in mu-plugins, there's no indication that it is working (i.e. the statistics don't show up in the footer, presumably because the setup routines aren't triggered). Can I put something in my UA string that will trigger BB2? Thanks in advance. Michael

I’m having trouble getting Bad Behavior to work with WordPress MU. Elsewhere you say that Bad Behavior should work if it is placed in mu-plugins or plugins. How can I tell if it is working?

If I place it in the plugins directory, it needs to be enabled on a blog-by-blog basis, which isn’t ideal.

If I place it in mu-plugins, there’s no indication that it is working (i.e. the statistics don’t show up in the footer, presumably because the setup routines aren’t triggered).

Can I put something in my UA string that will trigger BB2?

Thanks in advance.

]]> By: Michael Hampton http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1692 Michael Hampton Mon, 31 May 2010 12:55:18 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1692 Bad Behavior checks every crawler claiming to be Googlebot, Yahoo! or MSN/Live/Bing/whatever they rename it to next week. Legitimate ones pass, while fake ones are blocked. Unfortunately some people go through their logs, see a request from "Googlebot" was blocked, and didn't bother to check to see if it was the real Googlebot before they blogged about it. You can be sure that requests coming from a home cable ISP network are not from Google. :) Bad Behavior checks every crawler claiming to be Googlebot, Yahoo! or MSN/Live/Bing/whatever they rename it to next week. Legitimate ones pass, while fake ones are blocked. Unfortunately some people go through their logs, see a request from “Googlebot” was blocked, and didn’t bother to check to see if it was the real Googlebot before they blogged about it. You can be sure that requests coming from a home cable ISP network are not from Google. :)

]]> By: Luke http://bad-behavior.ioerror.us/2009/12/21/bad-behavior-2-1-1-and-2-0-36-security-release/#comment-1691 Luke Mon, 31 May 2010 11:54:49 +0000 http://www.bad-behavior.ioerror.us/?p=364#comment-1691 Thanks Alvaro. Looking forward to not getting shafted by link spammers! Our send to a friend forms have been taking a hammering and our domain has landed up on email blacklists as a result. Thanks Alvaro. Looking forward to not getting shafted by link spammers! Our send to a friend forms have been taking a hammering and our domain has landed up on email blacklists as a result.

]]>