What is Alternative to StrongBox-ThrottleBox?

[Barefootsies]

I have a client who does not like SB as a solution, but still would like some protection for his pay site(s). What are some of the comparable alternatives out there?

Fire away ladies.

[Karupted Charles]

We use Proxy Pass and love it.

[Lace]

Wasn't there one 'penny' something? wise maybe? I cant remember off hand.

[NaughtyRob]

www.proxypass.com FTW $50 per month for the entire server.

[stickyfingerz]

Pennywise yes lace. I recommend phantom frog..

[MikeSmoke]

I use Strongbox - but I'm pretty sure Mojo has a deal for clients on Proxy Pass, if your client is hosted there.

[fris]

just stay away from pennywize as it doesnt work worth shit

http://www.phantomfrog.com/

http://www.proxigence.com/pp-about.html

[MaDalton]

phantomfrog works excellent but does not replace throttlebox

[Barefootsies]

Thanks guys. Great feedback.

I agreed MD. I love SB/TB myself. It is a must for most pay sites.

However, I have a client who is familiar with SB, and does not care for it. So I figured I would get some alternatives for him to check out.

[BobG]

if you host with ISprime, they offer free use of their custom version, PrimeAuth. Works great for me and you can't beat the price

[Barefootsies]

Originally Posted by BobG

if you host with ISprime, they offer free use of their custom version, PrimeAuth. Works great for me and you can't beat the price

I believe they are hosted with CHOPPA.

[gmr324]

Thanks for the Frog plug stickyfingerz, fris and Madalton

Phantom Frog recently announced a new relevant feature.
Webmasters can selectively allocate individual members more
bandwidth without effecting the bandwidth limits of other members.
Another recent Frog feature reports Bandwidth History for the
previous 30 days for each member.

Finally, we're beta testing an additional feature related to
trial members. This feature recognizes trial plan members and
reduces their available bandwidth. When the trial plan converts
to a full membership it automatically converts their available bandwidth
to the full amount. This way, it prevents people from sucking
the entire contents of the site and then cancelling the free trial
before converting to the full plan.

Hope this answers your questions

Thanks

George

[raymor]

We'd VERY much like to hear about his concerns, suggestions for improvements, etc.
For three reasons, really, but I'll save the best for last. I'd really appreciate it if he gave
me a call, shoot me an email, or caught me on ICQ. [email protected],
ICQ 7208627, or phone 979-530-1300.

It may very well be that if he talked to us for a few minutes we could give him exactly
what he's looking for.

It's also common that webmasters say "I don't think I can use Strongbox for this because
I want to use ______ (Nats/Wordpress/whatever), and we reply "there's a setting
for that in the Strongbox config". Then the webmaster is really happy to find out we
have a setting for whatever they want to do - and do it better/easier than they planned
on doing it.

The biggest reason I like to talk to webmasters, though, is that very often a short
conversation will avoid a big problem for them. 98% of the time if a webmaster says
"I wish you had this feature" we tell them or show them exactly why we don't do that
and why they really don't want to. We'll pull up a site running PennyFrogPass or
whatever system they are referring to and show them how a hacker uses the "feature"
to dump the full list of passwords just like that. Of our three main "competitors", two
have "features" that are actually giant security holes and it's good for webmasters to
understand those significant issues before using those "features".

That reminds me, George, if I forget to get in touch with you guys in the next couple of
weeks remind me. Based on what the hackers are doing recently, we made an
important security update recently and I think you guys may need to make a similar
change. Whenever I get a free minute I plan to double check your code for that
one and another concern and I'll let you know if in fact I see something major. I've
just been so busy I haven't had time to look.

[natkejs]

We're using ProxyPass and are very happy. They have all sorts of modules available also to extend it and it has captcha support etc. etc.

Strongly recommended over here

[PhantomFrog]

RE: Raymor's indictment of his 3 competitors -- (PennyFrogPass)

"We'll pull up a site running PennyFrogPass or whatever system
they are referring to and show them how a hacker uses the feature
to dump the full list of passwords just like that. Of our three main
competitors, two have features that are actually giant security
holes and it's good for webmasters to understand those significant
issues before using those features."

I had a phone conversation with Ray today.

I asked Ray to tell me if he believed Phantom Frog had any of the security holes he mentioned in his indictment of his 3 competitors (PennyFrogPass). Ray said "NO".

I asked Ray if he would post a retraction of his indictment with respect to Phantom Frog. Ray said "YES".

I look forward to Ray's timely retraction.

Kind regards,
Bill -- Developer, PhantomFrog.com

[raymor]

Originally Posted by PhantomFrog

RE: Raymor's indictment of his 3 competitors -- (PennyFrogPass)

...


I asked Ray to tell me if he believed Phantom Frog had any of the security holes he mentioned in his indictment of his 3 competitors (PennyFrogPass). Ray said "NO".

I asked Ray if he would post a retraction of his indictment with respect to Phantom Frog.
...

Kind regards,
Bill -- Developer, PhantomFrog.com

I told Bill I would clarify this point:

My post was not an indictment of Phantom Frog or any other system specifically, and
should not be construed as such. When I said "PennyFrogPass or whatever system they
are referring to" I made up the generic combination of names specifically because
I did not want to point out any system in particular. My generic term "PennyFrogPass" does
not refer to any system in particular. I don't think it would be right for me to post details on how
to exploit any specific system, so I'm just saying generally that some systems have either
a) downright security holes or b) "features" which reduce security. We've chosen not to
include such "features" because they are not needed with our system and they reduce
security. So my post is not meant to say the Frog or any other specific system has any
specific problem. I'm not here to give the crackers help, so all I'm saying is that some
systems which are supposed to protect you actually have security holes of their own, period.
Any further details need not be posted publicly, but only discussed privately with people who
have a legitimate need to know.

Further, as I've said many times before, in my opinion Frog is better than a lot of systems.
Of course we prefer our own philosophy, but Frog is in many respects better than a lot of
scripts people buy, many of which are not well written at all. I also enjoy speaking with
Bill and George, who have been more cordial than you might expect from "competitors".
I don't really see them as "competitors" in the way you might expect, as we each offer something
different, coming from two different philosophies, so most webmasters will prefer one philosophy
or the other regardless of how we each try to "compete". Anyway, the point is my post wasn't
about Frog, and Bill wanted me to clarify that.

[C4W]

Originally Posted by BobG

if you host with ISprime, they offer free use of their custom version, PrimeAuth. Works great for me and you can't beat the price

I use it to.

[PhantomFrog]

"Good to see that clarified Ray"