View Single Post
Old 10-30-2004, 10:34 AM  
raymor
Confirmed User
 
Join Date: Oct 2002
Posts: 3,745
Strongbox does do two things different from most which
makes it qwork a lot better with AOL, especially the most recent
version of Strongbox.

A single AOL user may have many different IPs in a single session.
Most, if not all, security scripts look at the IP for every single
request
and really don't have any concept of "logging in" or of a single user session.
With all of these other scripts which are based on trying
to plug up mod_auth, each hit is more or less independent
so in one session the username may show up as being used
from 5 different IPs.

Strongbox, on the other hand, replaces mod_auth rather than trying
to path up the holes in mod_auth.
Strongbox correctly seperates authentication (logging in) from
authorization (requesting a file in the members area),
so a single session camn only show one IP regardless of how
many AOL proxies they go through in that session.

Also, Strongbox has a list of AOL proxies, caches, and client IPs.
When analyzing login attempts Strongbox special cases AOL IPs
and treats them appropriately.
__________________
For historical display only. This information is not current:
support@bettercgi.com ICQ 7208627
Strongbox - The next generation in site security
Throttlebox - The next generation in bandwidth control
Clonebox - Backup and disaster recovery on steroids
raymor is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote