raymor |
10-30-2004 10:34 AM |
Strongbox does do two things different from most which
makes it qwork a lot better with AOL, especially the most recent
version of Strongbox.
A single AOL user may have many different IPs in a single session.
Most, if not all, security scripts look at the IP for every single
request
and really don't have any concept of "logging in" or of a single user session.
With all of these other scripts which are based on trying
to plug up mod_auth, each hit is more or less independent
so in one session the username may show up as being used
from 5 different IPs.
Strongbox, on the other hand, replaces mod_auth rather than trying
to path up the holes in mod_auth.
Strongbox correctly seperates authentication (logging in) from
authorization (requesting a file in the members area),
so a single session camn only show one IP regardless of how
many AOL proxies they go through in that session.
Also, Strongbox has a list of AOL proxies, caches, and client IPs.
When analyzing login attempts Strongbox special cases AOL IPs
and treats them appropriately.
|