Support

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes (https://www.akeebabackup.com/documentation/admin-tools/web-application-firewall.html#waf-configure)
Joomla! version: (2.5.14)
PHP version: (5.3.27)
MySQL version: (5.5.32)
Host: (Liquidweb)
Admin Tools version: (2.5.8)

Hello,

I have WAF configured to autoban repeat offenders after 7 infractions within an hour. As you will see in the attached log, I visitor has been attempting a query string on the admin panel and does get autobanned for 1 day according to the admin tools email I am sent, but arrives very shortly after with the same infraction. This then triggers another email notification but still, the user returns.

Log attached.

https://www.dropbox.com/s/y9lxfmf7z8t1z77/WAF%20Log%20.xlsx

Settings attached:

https://www.dropbox.com/s/2pln13vog81sol7/Screen%20Shot%202013-09-20%20at%205.54.46%20AM.png

Jordan,

Under Web Application Firewall, Configure WAF, at the top under Basic Protection Features, the Disallow site access to IPs in Blacklist setting must be set to Yes.

Dale

Ah, ok.

Thanks Dale, I see that.

You're welcome!