Support

Admin Tools

#11080 Restoring user who was autobanned

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by user40075 on Tuesday, 14 February 2012 21:13 CST

user40075
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? yes
Have I searched the tickets before posting? yes
Have I read the documentation before posting (which pages?)? yes all
Joomla! version: 1.5.25
PHP version: (unknown) latest
MySQL version: (unknown) latest
Host: (optional, but it helps us help you)Rochen
Admin Tools version: 2.1.14
Description of my issue:

Hi Nikko!

I have a situation where a regular user of my site has been blocked from any access at all. (301 maybe?)I would like to restore her and avoid it happening again.

This is what I think happened. She tried to do a site search using Pix Search and mistyped her terms three times in just a moment. The log shows her mistyped entries and the reason for banning is CSRF Shield.

I have CSRFShield set to basic in configure WAF.
My Auto ban was set for 12 days as a result of 3 attacks in 1 hour.
(I AM paranoid after my site was used for spam relay last December!!)

I changed the Auto ban now to 4 attacks in 1 minute for five minutes as you advised another subscriber because that accomplishes its only purpose of stopping spammers.

Now the question is, how do I restore my friend's access to the site?
Or restore anyone's for that matter? I assume it is NOT by deleting their IPs from the log :)

It is probably obvious but I'm not seeing it.

Much Thanks,

Lowtech

nicholas
Akeeba Staff
Manager
Actually, you have to delete the log records with this IPs, as well as the records from the Auto-banned IP Administration. Check this page for the instructions: https://www.akeebabackup.com/documentation/troubleshooter/atwafissues.html

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075
Thanks Nikko!

I deleted the three log records with this IP from the security exceptions log. Then I went to Auto IP Blocking Administration and deleted the IP from there. So all should be OK now :)

If you have the time to answer this one: Why is it necessary to delete in two places? Why not just from the Auto IP Blocking Administration?

Thanks for all you do!

Best,

Fritz

nicholas
Akeeba Staff
Manager
Hi Fritz,

The IP autoban checks the log to see if an IP has triggered X security exceptions in Y time period (X, Y are your configuration parameters). From that point, we need to know for how long to ban it. We do that by creating an auto-ban record which says that the block is effective up to now + Z, where Z is the auto-ban duration.

If you only remove the auto-ban record the next time your friend visits your site, Admin Tools' plugin will see that your friend's IP has triggered X security exceptions in Y time period (since you have X set low and Y set very high), so it will, again, auto-ban your friend.

If you only remove the log records, there is still an auto-ban record instructing Admin Tools' plugin to ban your friend's IP for the next 12 days.

Ergo, you need to remove both to lift the ban.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075

Hi Nikko!

Thanks for the explanation. I have an email this AM from my friend that access is OK now.

If I might make a suggestion? Perhaps the next time you revise your instructional PDF for Admin Tools you could mention this. Good to know!

Best,

Fritz

nicholas
Akeeba Staff
Manager
Hi Fritz,

Usually someone manages to block himself and looks for a solution. The solution is in the troubleshooter, just like any other troubleshooting instruction. The reason is simple. The PDF is a static medium which can only provide a snapshot of our knowledge and best practices for that particular point in time. Unfortunately, the damn thing can't self-destruct in 30 days. Therefore, I can not persuade my users to not read their 10-months-old PDF to solve a problem in a Joomla! version released two weeks ago. The end result is that the troubleshooting instructions in the PDF are out-of-date, the clients are unhappy for having a "useless" troubleshooting guide and come here to file a ticket. Having the troubleshooting instructions on-line allows me to revise them whenever deemed necessary. Moreover, it allows me to address new issues as they emerge.

Bat what if someone doesn't go through the troubleshooter? Naturally, they will come over here to post a support request. When trying to post a ticket to this forum, I have a type-ahead system in place. As you're typing your ticket's title, we are looking for all of your keywords in our troubleshooter and documentation and give you the 10 most relevant troubleshooter and documentation pages. Half of the times someone tries to post a ticket, they end up not submitting one. Win!!! It's faster for them and for me.

Do you see now why I am very reluctant putting any kind of troubleshooting information in the PDF?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075
Hi Nikko!

I do indeed understand now why the PDF has limited value.

But I wasn't aware that the online was significantly different from the PDF so I have had the PDF linked on my desktop for easy reference and I have come to the site only when I couldn't find the answer in the PDF. In other words I have done exactly what you want us not to do. Through ignorance, of course.

Here is a suggestion. At the top of the help form it asks:
"Have I read the documentation before posting (which pages?)"
I would change that somehow to give the poster a tip. Perhaps something like "Have I read the up to date online documentation at [URL] before posting? Which pages, please?" Maybe that would remind people to check for the latest! : )

Best, and thanks again,

Fritz

nicholas
Akeeba Staff
Manager
Let me remind you of the first three lines of the mandatory information you filled in for your first post in this ticket:
Have I read the related troubleshooter articles above before posting (which pages?)? yes

Have I searched the tickets before posting? yes

Have I read the documentation before posting (which pages?)? yes all

As you can see, you suggestion is already there but you, like most of our users, didn't pay any attention to it whatsoever, therefore did not mention which pages you read (I don't have any page named "yes"), ergo you lied in order to get a faster reply. Which brings me to my favourite quote from Dr. House MD: "Patients lie". Q.E.D. :D

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075
Ah Ha!

There is the problem. "Trouble shooter articles" is a generic phrase that I took to mean the PDF. And I thought reading documentation was another way of saying the same thing or referring to FAQs.

So it needs to be spelled out even more. "Because the Admin Tools PDF guide may be out of date, please read the up to date online trouble shooter guide at [URL]." Have you read the online guide?

Best,

Fritz

nicholas
Akeeba Staff
Manager
I try not to write the story of my life. The attention paid by users to written material is inversely proportional to the number of words squared. Besides, the troubleshooter is mentioned in four different occasions in the documentation. Oh, wait, it's mentioned in the new version of the PDF version of the documentation, not the one you have. Q.E.D. once more.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075
OK Nikko!

I will also download the latest PDF.

Best,

Fritz

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!