Optimum Pennywize settings? - GoFuckYourself.com

Andre · 03-13-2005, 04:34 PM

Anyone willing to share how many subnets you let on before you shut down the account?

Tat2Jr · 03-13-2005, 04:40 PM

I found the best way to optimize my pennywize was to stop paying for it week after week, and buy strongbox! Strongbox mops up the floor with pennywize in security.

Andre · 03-13-2005, 05:15 PM

Quote:

Originally Posted by Tat2Jr

I found the best way to optimize my pennywize was to stop paying for it week after week, and buy strongbox! Strongbox mops up the floor with pennywize in security.

Waiting for Ray to install it. In the mean time I'm running PennyW. So anyone have any experince on how many subnets to allow?

raymor · 03-14-2005, 12:41 AM

I'm hoping your host will get me FTP access tomorrow so
I can get that taken care of for you. In the meantime, the
graph below (based on Strongbox data) should give you an
idea of where to set your IP threshhold. The data isn't exactly
what you'd really want for making this decision, but it should help.
Pennywize works on 24 hour period while the data below covers
longer time periods. I don't think that's going to matter very
much at all though, as you'll see in the graph. What may make
a bigger difference is that the graph below only accounts for
the first 3 octets of the IP, so 123.123.123.123 would show
up the same as 123.123.123.124. That's because Strongbox
knows that dial up and other dynamic IP users often get IPs in the same
subnet while different people aren't very likely to be in the
same subnet by random chance. never the less, here's the data.
It shows how many usernames were used from how many different IPs:

The leftmost point shows that about 5,300 usernames had only
one IP. 1,400 usernames had 2 IPs. About 850 usernames had 3 IPs.
The curve quickly drops. It's very low after about 6-10 IPs, which means
that very few usernames were used from more than 8 IPs.
The vast majority were used from 1,2, or 3 IP ranges. So I'd set my
cutoff between 4 and 10. Exactly where to set it depends on how tough
you want to be. Are you having a major problem and want to really
crack down on compromised passwords, or are you willing to let
some trading go on to reduce the number of legit users blocked?
Of course if your host takes care of getting FTP so I can upload
Strongbox that'll take care of the issue once and for all.

mistress69 · 03-14-2005, 12:43 AM

bump for ya

03-13-2005, 04:34 PM	#1
Andre Confirmed User Join Date: Oct 2002 Location: Inside Your Head Posts: 1,156	Optimum Pennywize settings? Anyone willing to share how many subnets you let on before you shut down the account?

03-13-2005, 04:40 PM	#2
Tat2Jr Confirmed User Join Date: Feb 2001 Location: Sunny California Posts: 4,882	I found the best way to optimize my pennywize was to stop paying for it week after week, and buy strongbox! Strongbox mops up the floor with pennywize in security. __________________ NICHE MONEY >> Ass Worship • Panties • Solo Teen • Pantyhose Serving up exclusive fetish sites since 1997!

03-14-2005, 12:41 AM	#4
raymor Confirmed User Join Date: Oct 2002 Posts: 3,745	I'm hoping your host will get me FTP access tomorrow so I can get that taken care of for you. In the meantime, the graph below (based on Strongbox data) should give you an idea of where to set your IP threshhold. The data isn't exactly what you'd really want for making this decision, but it should help. Pennywize works on 24 hour period while the data below covers longer time periods. I don't think that's going to matter very much at all though, as you'll see in the graph. What may make a bigger difference is that the graph below only accounts for the first 3 octets of the IP, so 123.123.123.123 would show up the same as 123.123.123.124. That's because Strongbox knows that dial up and other dynamic IP users often get IPs in the same subnet while different people aren't very likely to be in the same subnet by random chance. never the less, here's the data. It shows how many usernames were used from how many different IPs: The leftmost point shows that about 5,300 usernames had only one IP. 1,400 usernames had 2 IPs. About 850 usernames had 3 IPs. The curve quickly drops. It's very low after about 6-10 IPs, which means that very few usernames were used from more than 8 IPs. The vast majority were used from 1,2, or 3 IP ranges. So I'd set my cutoff between 4 and 10. Exactly where to set it depends on how tough you want to be. Are you having a major problem and want to really crack down on compromised passwords, or are you willing to let some trading go on to reduce the number of legit users blocked? Of course if your host takes care of getting FTP so I can upload Strongbox that'll take care of the issue once and for all. __________________ For historical display only. This information is not current: support@bettercgi.com ICQ 7208627 Strongbox - The next generation in site security Throttlebox - The next generation in bandwidth control Clonebox - Backup and disaster recovery on steroids Last edited by raymor; 03-14-2005 at 12:42 AM..

03-14-2005, 12:43 AM	#5
mistress69 Confirmed User Join Date: Feb 2005 Posts: 2,804	bump for ya