Support

Admin Tools

#13916 Suggestion: Filter and differentiate in Security Exception Log

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by tabletguy on Saturday, 20 October 2012 15:29 CDT

tabletguy
When using the exception log, I can filter to see only "Login Failure" for example.

I'd like to be able to also filter out "remove from blacklist" items, so that it only shows the "add to blacklist items.

Second, it would help a little to have "remove from ..." and "add to..." in different colors to enable faster reading of the pages. With the filter suggestion above, that's not as big a deal, but I thought I'd mention both suggestions.

A third item is the layout. Currently, the "remove from.." or "add to.." always appears under the IP address, even though I have a wide screen. I'd be able to see many more items per page if this could appear on the same line.

Lastly, a request for something I'm sure you've considered, but just to let you know. That would be a way to click on the IP address and go to an "IP Info" service to check out information on that IP address. I'd like something that would let me choose from among different websites that offer this information, or to be able to add my own website.

As always, I'm very pleased with all of your software offerings, and I continue to highly recommend it to any and all, when appropriate .

Stephan

tabletguy
Just to add to the list <smile>

I was thinking that it would be great to have a tool that could analyze the blacklist and propose ways to consolidate the many individual IP addresses into ranges of addresses.

Second, (and I admit I didn't research this in the user documentation), I'm hoping that the blacklist is or can be restricted to the administrator url addresses if desired, especially if blocking ranges of addresses. I'd still want the ability to allow front page visits from those same addresses.

nicholas
Akeeba Staff
Manager
I'd like to be able to also filter out "remove from blacklist" items, so that it only shows the "add to blacklist items.

You can't do that. The blacklist accepts IP expressions like ranges, CIDR blocks etc. In order to implement a filtering option like the one you requested we'd have to pass each and every entry in the log through PHP code to determine if it's filtered. With thousands of records this would require exorbitant amounts of memory and unrealistic amounts of CPU time, leading to a blank page (in the best case scenario!). What we are currently doing is that we check only the records you are presenting on the page against the blacklist. Since this is a very small subset (up to 100 records) it can be done within a reasonable time and without requiring massive amounts of memory.

This is something I can't implement, sorry :(

Second, it would help a little to have "remove from ..." and "add to..." in different colors to enable faster reading of the pages. With the filter suggestion above, that's not as big a deal, but I thought I'd mention both suggestions.

Ideally I should be using color-coded mini-buttons with icons. I am adding on my to-do list.

A third item is the layout. Currently, the "remove from.." or "add to.." always appears under the IP address, even though I have a wide screen. I'd be able to see many more items per page if this could appear on the same line.

Most people, however, do not have a very wide screen. The current choice is a compromise. Perhaps if I implement the mini-button idea above I will be able to squeeze them to the left of the IP address. I'll have to make sure the entire thing fits snugly on an iPad screen.

Lastly, a request for something I'm sure you've considered, but just to let you know. That would be a way to click on the IP address and go to an "IP Info" service to check out information on that IP address. I'd like something that would let me choose from among different websites that offer this information, or to be able to add my own website.

You mean like clicking on the magnifying link icon next to each IP address which is already implemented and fully customisable? ;) Yes, that's already implemented and more powerful than you wished for.

I was thinking that it would be great to have a tool that could analyze the blacklist and propose ways to consolidate the many individual IP addresses into ranges of addresses.

Noble goal which is hard to achieve and has no real benefit. The time to pull an extra record from the database and loop through it is less than the time required to parse an IP range or a CIDR block in PHP. You'd end up with something equally or more slow than you began with. Plus, it would be extra tough removing an IP from the list.

Second, (and I admit I didn't research this in the user documentation), I'm hoping that the blacklist is or can be restricted to the administrator url addresses if desired, especially if blocking ranges of addresses. I'd still want the ability to allow front page visits from those same addresses.

Nope. IP filtering is absolute. If you block an IP, it's blocked from everywhere. You should follow the opposite approach, whitelisting IPs. The whitelist allows admin access only to specific IPs. The drawback is that all whitelisted IPs also get an "all shields down" treatment, i.e. all IPs in the whitelist range get Admin Tools' WAF turned off for them.

As always, I'm very pleased with all of your software offerings, and I continue to highly recommend it to any and all, when appropriate .

Thank you very much, Stephan!

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

tabletguy
Thanks for your reply. I didn't notice the magnifying glass -- oops!

I'm using very high resolution screens -- 1920x1080 or more. That might explain it, but it doesn't excuse me from not noticing it.

Stephan

nicholas
Akeeba Staff
Manager
It's a busy page. I'll try to make it easier on the eye.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

tabletguy
Thanks

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!