Support

Admin Tools

#15358 Security Exceptions Log - Max log entries

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Monday, 11 March 2013 09:52 CDT

user28652

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: (2.5.9)
PHP version: (5.3.22)
MySQL version: (5.1.68-cll)
Host: (Rochen)
Admin Tools version: (Reported behavior under 2.4.4, but just loaded 2.5.2)

Description of my issue:

Hello Nicholas,

In the AT Plug-in, I set Maximum security exceptions log entries to "200". The log was quite large at the time I entered a value in the plug-in, so I gave the server time to purge entries down to 200 (10 screens). Upon reaching 200 entires, the log appeared frozen in time and the emails informing me that an IP had been blocked, stopped coming. Yesterday I replaced "200" with "0," log entries and IP blocking email notifications resumed.

I've manually reduced the number of log entries to 100 and will now re-enter "200" in max log entries in the plug-in, to see if the log builds up to 200 and then begins purging older entries, while continuing to run. At least, that is what I expected it to do. I'll let you know what happens in a day.

Regards, -- Dave/Legal.com

nicholas
Akeeba Staff
Manager

This is a known issue which will be fixed in the next release, next week.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user28652

Hi Nicholas,

Sorry if I missed seeing that this is a known issue. I wasn't able to find anything posted about it. In the interim, my test ran successfully. When I reduced the log entries below 200, then set 200 as the max value, the log counted up to 200 and has remained there. WAF is working, including sending periodic emails letting me know that another IP address has been blocked. More subjectively, the 2-3 spam posts per week in our forum have stopped, since resumption of security exceptions logging (with http:bl enabled in the WAF). In summary, behavior under AT 2.5.2 WAF appears correct to me, as long as you start with less than the desired number of log entries, when entering a value to limit the number of log entries.

Regards, -- Dave

nicholas
Akeeba Staff
Manager

Hello Dave,

The other two reports came in through a private ticket and an email, that's why you couldn't find them. I've already found the cause of this issue and fixed it. This week I'm going to release a new version.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!