Support

Admin Tools

#12611 IP-adress defined in WAF and Whitelist but still blocked

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by user41123 on Monday, 11 June 2012 07:51 CDT

user41123
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? No
Have I searched the tickets before posting? No
Have I read the documentation before posting (which pages?)? No
Joomla! version: 2.5.4
PHP version: 5.3.x
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: 2.2.6

Description of my issue:

Hi Nicholas,

I'm using Gtranslate Enterprise with aliasnames of my website. The translated pages are hosted on the server of Gtranslate. To prevent blocking the ip-adress of Gtranslate I've defined it in WAF (in the fields of "Bad Behaviour integration" and "Autoban Recidivists" and also seperate in the "Administrator IP Whitelist".
This works great for several months but last night translated pages become unreachable with the message “The page you are looking for is temporarily unavailable. Please try again later.”
After long search and contact with Gtranslate and my webshoster I found out that the ip-adress was blocked in the automatic blocking list with blocking-reason "login-faillure" on the ip-adres.

How is this possible and how can I prevend that this happens again?

Greetings, Paul

nicholas
Akeeba Staff
Manager
You have to disable the "treat failed logins as security exceptions" feature in the Configure WAF page. It sounds like GTranslate acts as a proxy server, making all failed logins appear as if coming from the same page. Also double check that the IP address you see blacklisted does belong to GTranslate and hat it does appear in any of the white lists.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user41123
Hi Nicholas,

I'm positive the ip-adress is from the Gtranslate-server. A pingcheck of a translated aliasname like en.mywebsite.com or fr.mywebsite.com resolves directly to the Gtranslate server with that ip-adress.
I've also double checked that the IP-adress is defined in the WAF and in the Administrator White List.

All translated text is hosted on the GTranslate server. It's possible to login to the Gtranslateserver for editting the translations. I have to do this in a internetbrowser with a special command in addition to the url of a translated page, like http://en.mywebsite.com/?language_edit=1.
Anyone else can try that also but before saving a translation you have to know the username and password. Maybe some funny guy have tried this and Admin Tools just did his work?

I follow your advice and disable the "treat failed logins as security exceptions" feature in the Configure WAF page.

Thanks for your advice.

Greetings, Paul

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!