Support

Admin Tools

#16719 IP keeps getting blocked, even though it has been added into "IP Whitelist"

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by deeno on Tuesday, 09 July 2013 07:16 CDT

deeno
Mandatory information about my setup:
Have I read the related troubleshooter articles above before posting (which pages?)? YES
Have I searched the tickets before posting? YES
Have I read the documentation before posting (which pages?)? YES
Joomla! version: 2.5.11
PHP version: 5.3.21
MySQL version: 5.1.44
Host: (optional, but it helps us help you)
Admin Tools version: 2.5.6

Description of my issue:
Even though our static IP has been added to the IP Whitelist, we keep being blocked from time to time...??? All members of our staff are visiting the sites backend from our office, all with the same IP, but if one forgets for example to add after "/administrator" the "?secureword" it blocks us all... I thought that if an IP is added to the Whitelist, no scan at all will be conducted upon visits from this IP...? We even used your tip to check our IP at http://whatismyipaddress.com/, and we added the one showed up (it was the correct one). Any idea why this happens?

Best regards,
Konstantinos Koulaouzidis

nicholas
Akeeba Staff
Manager
Have you turned on the whitelist feature in the Configure WAF page? It sounds like you forgot that small but crucial step.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

deeno
What exactly do you mean?
We have the following configuration in WAF:

1. Allow administrator access only to IPs in Whitelist = NO
2. Disallow site access to IPs in Blacklist = NO

The reason we use in [1] NO is that we want us and the client to be able to work / make changes on the site, even from outside the office. But we still added our IP in the Whitelist in order to prevent it from being scanned by AdminToolsWAF... Did i misunderstood something?

Basically, we do not want to get blocked every now and then while working on the site (as some of our staff forget to use ?secureword or leave a tab open and upon restarting the browser, this generates an exception etc...).

nicholas
Akeeba Staff
Manager
> 1. Allow administrator access only to IPs in Whitelist = NO

This means that all IPs in the Administrator IP Whitelist are ignored. You can, however, add your IP to one of the allowed IP fields in the Configure WAF page. These are never ignored and result in your IP never being blacklisted automatically.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

deeno
so you are suggesting we add our static IP in:
Auto-ban Repeat Offenders>Never block these IPs:xxxxxxxxxxxxxx
and remove it from the IP Whitelist
and also keep Allow administrator access only to IPs in Whitelist = NO
?

nicholas
Akeeba Staff
Manager
Yes, exactly.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

deeno
will try!
euxaristw poly gia tnv wra!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!