Support

Regarding the security exceptions log: the requests we had were for sharing the exceptions log database table among several sites. That's a security risk on its own right, so we're not going to implement it. If you're wondering if the .log file contains all the security exceptions raised: yes, short of. The log file is rotated automatically after growing over 1Mb, meaning that the log file has only the last security exceptions which fit in 1Mb of text. The log table has all the exceptions unless you've set up automatic purging of old entries in the System - Admin Tools plugin's options.

Regarding the 403 custom message: the error page, no matter what the template or message is, is sent to the browser with an 403 Forbidden HTTP header. This means that the server access log always shows it as a 403 page, exactly as it should.

Regarding the email, I'm not sure which one you are referring to?

You mean the email you are receiving when an IP of a repeat offender gets automatically blocked? That's not available in the custom email templates feature but you can use Joomla!'s language override feature and change the ATOOLS_LBL_WAF_AUTOIPBLOCKEMAIL_SUBJECT and ATOOLS_LBL_WAF_AUTOIPBLOCKEMAIL_BODY language strings. For detailed information on language overrides please consult Joomla!'s documentation on the subject. And yes, the overrides are NOT overwritten when you upgrade Admin Tools. That's the whole point of this Joomla! feature.

As for reason lookups, no, that's not possible. However, you don't really need it. If you go to Admin Tools, Web Application Firewall, IP Auto-ban administration and look up the blocked IP you'll see the reason printed there. Alternatively, you can download the PDF documentation and search the block reason you see in your email. As you can see, there's a handy index of all reasons leading you to the relevant WAF option's documentation page.