Sifara - ASP IP Guard release v1.3 (MS Access version)
==========================

Please read the Copyright Agreement that came with this software first.

==========================
Introduction

Thank you for using this application and hopefully you will find it of benefit to you.
If you have not downloaded this application from Sifara then check for the latest
version at: http://www.sifara.com
This application uses ASP and must be run through a web server supporting ASP.
It has been tested on PWS 4 and IIS 4 and 5 on Windows 2000/XP/NT4/98.

==========================
Installing ASP IP Guard

1. Unzip all the files keeping the directory structure intact, most files should be in the
folder called ipguard.

2. Files must be run through an ASP enabled web server or on ASP enabled web space. (check
with your hosting company).

3. Open the file called config.asp and change the following strings:
ipAdminEmail = "youremail@yoursite.com" 'Change this to your email
ipUser = "admin" 'Change to your Username
ipPass = "pass" 'Change to your password
strIPGuard = 1 '1 for Banning enabled - 0 for disabling this application
'Change the unique Key to anything you want for each site you use ASP IP Guard in
'if you want to prevent cross banning your visitors. Visitors banned in one site
'will not be banned in the other.
strIPuniKey = "ChangeThisToWhatEverYouWant" 'Unique Key.
And the physical path to your database:
xDb_Conn_Str = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=C:\inetpub\wwwroot\yoursite\ipguard\ipguard.mdb" '## MS Access 2000
If you don't know the physical path to the DB ask your hosting company.

4. Make sure the pages you want to protect by ASP IP Guard have the extension .asp and place the following lines
at the beguinning the page right before <%
They should be the first line in your page.
For ASP 3 (Win2k/Win2003 Servers): -
<% Server.Execute"ip.asp" %>
For ASP 2 (NT4 Servers): -
<!--#include file="ip.asp" -->

5. Log on to the administration page: http://www.yoursite.com/ipguard/ using your username and password.
From the administration files you can
- View a list of banned IP Addresses.
- Add an IP Address to ban.
- Edit / Delete a banned IP Address.

6. If you ban yourself in the process of monkeying with the script,
simply clear your cookies and logon to IPGuard and delete your IP Address from the banned list

7. If you are having problems with running ASP IP Guard then edit the files config.asp
with note pad where you can select to use a different database driver or use DSN if you are able
to setup DSN on your web server.

8. If you move the ipguard.mdb database to another directory then place the new path into the
file config.asp (you should do this anyway with the Access version to prevent hackers downloading
your database)

==========================
How to use ASP IP Guard

Banned IP Addresses are stored in the database that uses the following fields
IP Address Example: 213.45.151.142
IP Message The message you want to display to the banned IP user
Notes Notes that you only see. Reminders, ..etc.
Ban Date Date you banned the son of a @#$%
IP Expire When will the Ban Expire
In order for an IP to be properly banned it has to be in the format a.b.c.d
4 numbers separated by dots where the numbers range from 0 to 255
Example: 213.45.151.142
This version does not support range banning where you can ban a whole range of IPs from a.b.c.d to e.f.g.h
or a.b.c or a.b or a.
It bans IPs on an address by address basis. It's not designed to ban whole ISPs or countries.
Please check for Pro Version.

==========================
ATTENTION

If you happen to ban yourself from your own site, you have to clear your cookies and delete your own ip from the banned ip list.

==========================
Common database error when using the ASP IP Guard

If you receive the following error: -
Microsoft OLE DB Provider for ODBC Drivers error '80004005'
[Microsoft][ODBC Microsoft Access Driver] Operation must use an updateable query.
This means that the directory the database is in does not have the right permissions
to be able to write to the database.
If you are running the web server yourself and using the NTFS file system then log on to
http://www.sifara.com, on how to change the server permissions on Win2k/NT4.
If you are not running the server yourself then you will need to contact the server's
administrator and ask them to change the permissions otherwise you cannot update a database.
For other common database errors see http://www.sifara.com

==========================
Make sure your database is secure!!!!!!!

To prevent hackers from downloading the Access database and obtaining sensitive information
from within it you must place the Access database in a secure location.
1. Move the ipguard.mdb database to a private folder outside of the root of your web site
(also make sure the folder has correct permissions to write to the database).
2. For more security, remane ipguard.mdb to an other name
2. Edit the file config.asp and change the name and the path to the location of the database.

==========================
Problems running the ASP IP Guard Application

If you are having trouble with the application then please
post support questions, queries, suggestions in the Support pages at: -
http://www.sifara.com

If I have missed anything out or any bugs then please let me know by e-mailing me at: info@sifara.com

Copyright 2001-2005 Sifara All Rights Reserved.