Support

Hi Since I have installed the Admin Tools firewall, I been having issues with user registering on my site using Community Builder CB Subs (membership script). They get timed out by their browser and their registrations don't complete. Then they call wondering why they can't get in...

Also I have had issues with a Paypal based script -called Quicksell. The IPN isn't getting through and customers aren't getting their orders.... following the documentation, I had disabled the CSRF/Anti-spam form protection (CSRFShield) but the problem was happening anyway. When I spoke to the Quicksell developer, he said a firewall could be the problem.

I'm wondering if there needs to be some security exceptions for these components, but I'm not sure how to set it up. My office has superfast internet and the latest browsers, but some customers have older browsers, different set ups...the result being that so far, I have been unable to duplicate the errors - all I can do is field the complaints and view the components' backend, seeing that orders confirmed by Paypal are not registered in Quicksell. I see security exceptions for legitimate looking username and passwords failing to login. Trying 3-4 times with the same combination like they expect to be able to login but looking at the user manager and seeing no such username recorded.

I have had both of these extensions for over a month and neither of these issues came up until the installation of Admin Tools, which makes me think it's something to do with the firewall.

Thanks for any help you can provide

Not being able to reproduce the problem yourself is a killer. Maybe one of your failed users could help you diagnose the problem? You are correct that some applications require special handling in the WAF configuration. The instructions are here: https://www.akeebabackup.com/documentation/troubleshooter/athtaccessexceptions.html.

I don't think it is the Admin Tools firewall. The WAF is a black and white application, it either lets the traffic pass or it rejects it. This is a "gray" problem, sometimes it works, sometimes it doesn't. If the registration works for you locally, it isn't something that needs an exception for the firewall.