Support

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 2.5.11
PHP version: 5.3.26
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: 2.5.6

Description of my issue:
In WAF I have enabled the automatic blocking of IPs in case of repeated security exceptions.
The blocking is set to last for one day.
The email notification was set in order to notify in case of a blocked IP.

What is happen is this:
- An IP is blocked by the autoblock
- An e-mail is sent
- Despite the IP is already blocked (it appears in the list of auto-blocked IPs) I receive repeated notifications of blocking.

It looks like the IP is blocked but, for some reason, after a while, due to additional exceptions raised by the same IP, the blocking is reset, and a new updated notification email is sent.

Is this a normal behaviour? I would have expected the blocking to stop notifying about the same address until the block is lifted.

Am I wrong?

Thank you.
Gabriele

Hi Nicholas,
thank you for your reply.

The problem is that I receive new notifications **before** the blocking has expired.

For instance, the blocking is now 1 day, but I receive notifications every about 25min regarding the same IP...this does not sound normal, isn't it?

Maybe rounding could be a problem, but I do not think it could be in this case, because the blocking is set to last for 1 day, but notifications come every 25 min...which is quite different...

any way to solve this?

Thanks,
Gabriele

Yes, the IP is blocked in the auto IP blocking page.
The IP is exactly the same.

Gabriele

Hi Nicholas,
thank you for taking care of the issue.

Actually joomla time zone was inconsistent with respect to server time zone.
Now I have corrected it.

Let's see if, with this new setting, the problem will be solved.

Thanks,
Gabriele