Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi Alex,

    Sorry my poor description. It enables to pretend to block requests in order to see who would be blocked.

    Suppose you want to block requests from US but you don’t want to block some bots (for example, google). You may define “UA string and qualification” to exclude the bots from the blacklisted country (e.g. US). In this case, you might verify what you intend before deploying the blocking behavior using “Simulation mode“.

    The description can be found here: http://www.ipgeoblock.com/codex/overview.html#simulation-mode

    Thank you for asking.

    Thread Starter alexlii

    (@alexlii)

    Thanks:) So, it is actually used for test purpose, right?

    if I want block definitely by country, Simulation mode should be UNCHECK, right? By the way, I am using whitelist in Matching rule, and using BLOCK BY COUNTRY for most of setting option in both frontend and backend, should I enable “Use Autonomous System Number (ASN)” for strict security practice?

    Untill today, I am using VPN and found there is google map under search option, In IP-Geo-Block, I am in China, and we are blocked to access Google resource. So any plugin within global resource like google fonts, google JS, twitter, Facebook will cause our server delay, and I even need VPN to access ww.wp.xz.cn.

    Fortunately, we can access google map by the address http://www.google.cn/maps, but still can not access google global site, like https://www.google.com/maps/@0,0,4z?hl=en-US, so is it possible to change google map url in IP-Geo-Block http://www.google.cn/maps?

    If yes, appreciated your support, and let me know which code I should change.

    but if not, I would like to show my understanding.

    Thanks again, have a nice day.

    Alex

    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi Alex,

    So, it is actually used for test purpose, right?

    Yes.

    if I want block definitely by country, Simulation mode should be UNCHECK, right?

    That’s right.

    should I enable “Use Autonomous System Number (ASN)” for strict security practice?

    No. The ASN has no relation to security. It’s just for your convenience. Please refer to 3.0.4 Release Note.

    Regarding to Google APIs, I’ll provide some new filter hooks to replace its URLs to China’s. Please wait until the next release.

    Thank you for your patience.

    • This reply was modified 8 years, 6 months ago by tokkonopapa.
    Thread Starter alexlii

    (@alexlii)

    Great appreciated your work:)
    Good luck!

    Alex

    Thread Starter alexlii

    (@alexlii)

    Great appreciated your work:)

    By the way, if there is way to show users at frontend on map by Geo, it would be fancy for community, but I understand this is another application purpose, I tested a lot of plugins, all of them only provide user map for administrator at backend, I can understand that is statistic purpose, but I think it is open and share times today, and resources should be used for frontend and users experience, embed a shortcode into a page maybe more flexible to usage.

    Another thing is that I found the session on Multisite is not synchronized, for example, there are four sub site, A, b, c, d sites, I am online site A, but maybe offline others, and I can not access main site dashboard.

    I am try to find the reason, still not find the answer, if you like, maybe help to analyze, I am not sure whether it is relate to Ip-Geo-block.

    The following is what I did for your reference:

    1#I always need use VPN to explor global resource, and always switch VPN on and off. Some times ip-Geo-block show I might be blocked out, that is great, so I will switch vpn offline.

    2#I use Multisite-auth to assign one sub site to register, so that we can easily manage user registration and check or monitor emails records and manage CRM in single subsite.

    3# I disable users to access to dashboard, so I use The plugin of ” hidden-WP-ADMIN”(https://ww.wp.xz.cn/plugins/hide-my-wp/) to redirect accessing dashboard to login site home page.

    here is more information about our server from Ip-geo-block:

    – Server: nginx/1.10.0
    – PHP: 5.6.30-0+deb8u1
    – WordPress: 4.9
    – Multisite: yes
    – File system: direct
    – Zlib: yes
    – ZipArchive: yes
    – BC Math: yes
    – mb_strcut: yes
    – DNS lookup: available [1.6 msec]
    – Twenty Seventeen 1.4
    – Code Snippets 2.9.4
    – Easy Updates Manager 6.4.8
    – Email Templates 1.2
    – Hidden WP Admin 1.2
    – IP Geo Block 3.0.4.6
    – Multisite Plugin Manager 3.1.5
    – Multisite User Management 1.1
    – myCRED 1.7.9.3
    – Nginx Helper 1.9.10
    – Postman SMTP 1.7.2
    – Remove Query Strings From Static Resources 1.4
    – Safe Redirect Manager 1.7.8
    – Snitch 1.1.5
    – Multisite auth 0.1.4
    – SVG Support 2.3.11
    – Useso take over Google 1.8
    – WP Redis 0.7.0

    It might be complicated, and thanks for your time.

    Have a nice day!

    Alex

    • This reply was modified 8 years, 6 months ago by alexlii.
    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi Alex,

    if there is way to show users at frontend on map by Geo, it would be fancy for community,…

    This can be done by the function IP_Geo_Block::get_geolocation(). Please see the followings:

    Regarding to you 1#, please refer to http://www.ipgeoblock.com/changelog/release-3.0.5.html#new-feature-filter-hooks-for-google-apis

    And about 2#, I think Multisite-auth has its own session to achieve the site wide authentication. On the other hand, IPGB adopts the WordPress standard authentication and verification mechanism. So I’m sorry I can’t make them compatible.

    About 3# for the last, “Hide My WordPress” which I don’t know well may just navigate to the dashboard by redirection. It means that it might not have any relation with authentication mechanism itself. Of course, it may be helpful especially against the brute-force attack to the login.php,
    but it has no protection ability against CSRF vulnerability which is usually combined with other attacks such as XSS and SQLi. It is because the attacks against CSRF may success with your admin credential information by clicking malicious links.

    And you may be intersted in this article.

    I hope your kind understanding.
    Thanks.

    Thread Starter alexlii

    (@alexlii)

    Oh, Great!!!

    [ip-geo-block alt="<img src='/image/alternative.png' alt='This content is not allowed in your country.' />"]
    
    <p>This is a content for whitelisted countries.</p>
    
    [/ip-geo-block]
    

    should I replace any thing in: '/image/alternative.png 'when I use it in our site?

    By the way, as you said, multisite-auth is not compatible with IP-Ge0-Block, can I activate IP-Geo-Block in every sub site individually to avoid any conflict?

    Thanks so much.

    Alex

    • This reply was modified 8 years, 6 months ago by alexlii.
    Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi,

    should I replace any thing in: /image/alternative.png when I use it in our site?

    That’s right.

    can I activate IP-Geo-Block in every sub site individually to avoid any conflict?

    Unfortunately, the result is the same as now. The problem is both have different methods. One has its unique session and the other depends on the WP standard session.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘what does “Simulation mode” mean?’ is closed to new replies.